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Drafting Pieces of Team 
System for Collaboration 

Developers make it work with tools in place 

BY JENNIFER DEJONG 

The move from Visual Studio 2003 to 2005 is a no-brainer. But 
making the leap to Team System is another story. 

That's the consensus of a handful of Microsoft developers, 
when asked to what extent they have adopted the various editions 
of Visual Studio 2005, based on .NET Framework 2.0. 

"There hasn't been a wholesale stampede to Team System," 
said Billy Hollis, a Nashville, Tenn.-based .NET consultant. The 
role-based edition of Visual Studio 2005 combines tools for archi- 
tects, developers and testers with an underlying collaboration serv- 
er for source control, build management and reporting. 

Microsoft shops are holding back because they are still figuring 
out where Team System fits in with what they already have, the 
developers said. Adopting the new offering wholesale doesn't 
make sense for teams that have already invested in third-party 
tools for modeling, testing and source control, said Jon Rauschen- 
berger, CTO of Clarity, a Chicago-based .NET and Java consul- 
tancy. "Our customers are asking: 'Which tools do we displace? A 
1.0 [Microsoft] product, competing against Rational's tool set?'" 

From a cost standpoint, development managers must decide 
whether to relicense the tools they have already invested in 
or opt for the new Microsoft alternatives instead, noted 
Rauschenberger. 

Jonathan Cogley, CEO of Thycotic 
Software, a Vienna, Va. -based 
.NET consultancy, is commit- 
► continued on page 26 




Upstart FireStar: Hibernate 
Violates 0/R Mapping Patent 



BY ALEX HANDY 

Boston-based FireStar Software 
has filed a patent infringement 
suit against Linux maker Red 
Hat alleging that Red Hat's 
maintenance and development 
of Hibernate is an unauthorized 
use of FireStar's patented 
method for mapping software 
objects to a database. 

The Hibernate project is 
maintained by JBoss, which Red 
Hat acquired in June. The 
patent, titled "Object Model 
Mapping and Runtime Engine 
for Employing Relational Data- 
base With Object Oriented Soft- 
ware," has been characterized as 
spurious by at least one open- 
► continued on page 19 



THE CASE AGAINST RED HAT 



On August 8, 2000, [the patent] on 
an invention entitled "Object Model 
Mapping And Runtime Engine for 
Employing Relational Database With 
Object Oriented Software" was duly 
and legally issued by the United 
States Patent and Trademark Office. 

On May 26, 2006, FireStar sent 
a letter to JBoss Inc. advising it that 
the marketing, distribution, use of and 
continuing offer to provide support 
services for JBoss' Hibernate 3.0 soft- 
ware constitutes an infringement of 
one or more claims of the...patent. 

FireStar has been damaged and 
has suffered irreparable injury due 
to the acts of infringement by defen- 



dants and will continue to suffer 
irreparable injury unless defendants' 
activities are enjoined. 

SEEKING RELIEF 

FireStar prays that the court enter 
judgment in favor of FireStar...on all 
of FireStar's claims; permanently 
enjoining defendants...from infring- 
ing or inducing or contributing to 
infringement of the patent; that all 
infringing materials be impounded or 
destroyed; for an award of damages 
adeguate to compensate it for defen- 
dants' acts; for interest on damages; 
for an award trebling damages. 

Source: FireStar Software complaint 



An Alternative For 
Business Modeling 

xBML Innovations calls BPMN complex 
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BY P.J. CONNOLLY 

There's more than one way to do 
business modeling. At least, 
that's the message xBML Innova- 
tions is sending with the release 
at the end of June of xBML W2, 
a tool that allows business ana- 
lysts to define and scope basic 
needs and requirements. 

Although OMG's Business 
Process Modeling Notation 
(BPMN) has broad industry sup- 
port, xBML Innovations — the 
acronym refers to the proprietary 
eXtended Business Modeling 



Language — positions its xBML 
methodology as a superior way to 
define business processes. 

An offshoot of the company's 
xBML W5 modeling tool, W2 
builds a two-dimensional model 
that tracks a business's necessary 
activities and the information 
required for each activity. Cus- 
tomers may then integrate these 
so-called "what" and "which" 
models into a "how" model that 
describes the activity sequences, 
the dependencies between activ- 
ities, and the flow of data 



BPMN is an abstraction of BPEL 'that 
no human should ever have to look 
at/ says xBML Innovations' Baker. 

between activities. 

xBML Innovations is posi- 
tioning W2 as a natural extension 
of its existing tools; it ties into the 
xBML M2 Model Manager — a 
► continued on page 23 
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Lotus Blossoms Into Linux Desktop Market 

Notes client runs custom applications; Linux-based coding beta due out this fall 



BY EDWARD J. CORREIA 

For Lotus Notes shops waiting 
years to run their customized 
apps on Linux workstations, the 
wait is finally over. 

On July 24, IBM began 
shipping Lotus Notes on Linux 
7.0.1, a version of the venera- 
ble productivity client that it 
says now enables Linux desk- 
tops not only to run Notes 
e-mail, calendar and collabora- 
tion applications, but also to 
execute custom Notes apps 
formerly available only to Mac 
OS and Windows users. The 
tool is implemented as an 
Eclipse plug-in. 

Notes development remains 
a Windows-only affair, however. 
Developers looking to build 
Notes apps from a Linux work- 
station will have to wait for 
Hannover, the code name for 
IBM's multiplatform Eclipse 
implementation going to beta 



this fall. Hannover will be a full 
rich-client implementation with 
support for Eclipse 3.2. It also 
will introduce Notes support 
for the OpenDocument Format 
(ODF) spec from OASIS. Gen- 
eral availability is scheduled for 
the first half of 2007. 

Despite IBM's strong 
embrace of Linux in recent 
years, the company has 
delayed deployment of a Notes 
client for Linux. According to 
IBM senior manager Arthur 
Fontaine, the wait was due to 
simple economics. 

"We were waiting for 
Eclipse to be ready. We've been 
maintaining code for Windows 
and Macintosh, and we didn't 
want to add Linux and a third 
codebase," he said. "With 
Eclipse, we go into a mode 
where we're developing apps 
for Windows, Linux and Mac 
OS with one code stream, just 
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IBM delayed deployment of a Notes 
client for Linux because it was 
waiting for Eclipse, says Fontaine. 

like Rational tools do now." 
Hannover also will introduce 
Java features to Notes, 
Fontaine said, but he declined 
to provide further details. 

Fontaine said that from the 



perspective of Notes e-mail and 
groupware functions, which 
were themselves developed 
using Notes, a Linux-based 
client permits such features to 
be available on the platform 
"without WINE or whatever," 
he said, referring to the open- 
source compatibility layer pro- 
ject for running Windows apps 
on Linux and Unix. "If you're 
an Exchange customer, too bad. 
[Microsoft] will not do that for 
you." Domino, the Notes server 
component, has been available 
for Linux and Windows since 
1998, and Linux users have had 
browser-based access for the 
Notes Web interface since 
2003, he said. 

The ability to run Notes 
applications on Linux worksta- 
tions, Fontaine said, changes 
the cost structure once associ- 
ated with wide-scale Notes 
deployments. "Our opportuni- 



ty was to break that operating 
system cost and break in. Now 
[companies] can deploy re- 
sources and existing applica- 
tions to a new class of desktop. 
This changes your financial 
dynamics, especially where 
they're looking for low-cost 
desktops." IBM claims that 
about 125 million Notes 
clients have been deployed 
worldwide. 

Pricing for Lotus Notes 
starts at US$101 per client plus 
another $70 per client for mes- 
saging. But current Mac OS 
and Windows licenses can be 
transferred to Linux at no cost. 
Domino pricing starts at $1,145 
per server processor. 

Lotus Notes for Linux 7.0.1 is 
available now for Red Hat Enter- 
prise Linux 4, update 3 at 
www-128.ibm.com/developer 
works/lotus. Support for SUSE 
Linux 10 will follow by October. I 



SEC's Pilot XML Program Floundering 

New incentives offered to SEC registrants that sign up for XBRL filings 



BY P.J. CONNOLLY 

Although attention to corporate 
governance and financial report- 
ing is at an all-time high, the 
U.S. Securities and Exchange 
Commission is finding that one 
of its pet projects — getting com- 
panies to file their financial data 
in the XML-based extensible 
Business Reporting Language 
(XBRL) — isn't going so well. 

XBRL is an open, interna- 
tional standard for reporting 
financial data, supported by 
hundreds of businesses, gov- 
ernment agencies and other 
organizations. XBRL "tags" are 
applied to individual types of 
financial data (for example, "net 
loss") and provide additional 
data as required, in any lan- 
guage, in as detailed a format as 
necessary. 

Financial analysts, auditors 
and accountants — and the 
developers of applications used 
to crunch corporate numbers — 
can use XBRL-formatted data 
to draw comparisons more easi- 
ly between companies that 
report their data in varying 
ways, according to the SEC. 

Deborah Doane, vice presi- 
dent of product marketing for 
EDGAR Online, a provider of 
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Source: EDGAR Online 

End users receive XBRL-formatted data streams that aggregate real-time feeds from markets and the SEC. 



financial analysis tools and an 
early promoter of XBRL, 
explained that by using data in 
XBRL formats, end users get 
"more power than they've had 
before to spot trends, or identi- 
fy potential risks or anomalies 
in financial reporting." She 
described the current situation 
as parallel to what was happen- 
ing around 1999, when most fil- 
ings into the SEC's EDGAR 
system were formatted ASCII 
text, and HTML formats were 
optional and little-used. HTML 
has become the new ASCII, 
with XBRL waiting for its turn. 
For such a scheme to work 



well, it requires central coor- 
dination, provided by XBRL 
International, a nonprofit con- 
sortium based in New York. 
The consortium maintains 
financial reporting taxonomies 
for a variety of jurisdictions 
and industries. As of July 14, 
21 taxonomies had been 
acknowledged or approved by 
XBRL International — mostly 
for American standards, but 
including European and Asian 
jurisdictions as well. Applica- 
tions that can understand the 
various taxonomies can then 
compare financial data and 
reports consistently. 



However, even after repeat- 
ed calls from the SEC for par- 
ticipants in the commission's 
"Voluntary Supplemental Fil- 
ing Program," the response has 
been underwhelming. So at the 
end of June, EDGAR Online 
and the financial services arm 
of printing giant RR Donnelley 
(which prints SD Times) an- 
nounced a new incentive pro- 
gram. Any SEC registrant that 
commits to XBRL-formatted 
filing will receive a complimen- 
tary interactive data submis- 
sion, prior to Oct. 31, 2006. 
Current participants in the pro- 
ject's Interactive Test Group — 



which number more than 
24, including Donnelley and 
EDGAR Online — will receive 
complimentary submissions 
during the remaining part of 
the 12-month trial. 

Participants in the volun- 
tary filing program are not 
necessarily committing to 
XBRL — at this time, they can 
file earnings releases in XBRL, 
do not have to file consecutive 
periods in XBRL, and can start 
and stop filing via XBRL at any 
time. These companies receive 
from Donnelley and EDGAR 
Online a number of benefits, 
most significant of which is a 
ready-to-file U.S. GAAP-com- 
pliant XBRL instance docu- 
ment for the associated finan- 
cial . This document includes 
the balance sheet and cash 
flow and income statements 
from the Forms 10-K and 10-Q 
that each SEC registrant must 
submit. 

The next level of participa- 
tion — the test group — requires 
a commitment to submit four 
financial data filings in XBRL 
and also to provide feedback to 
the SEC; in return, they receive 
expedited reviews of their secu- 
rities registrations. I 
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Compuware Incorporates 
SteelTrace Tool Into Fold 

Requirements solution takes Optimal family name 



BY JENNIFER DEJONG 

Three months after it acquired 
SteelTrace, Compuware has 
begun incorporating the Irish 
company's requirements tool 
into its own product line. 

The Detroit-based Com- 
puware announced Optimal 
Trace 4.1 in late June. 

Formerly known as Steel- 
Trace, Optimal Trace borrows 
its new name from its sibling 
OptimalJ. "We have moved 
aggressively to integrate the 
SteelTrace acquisition into the 
Compuware fold," said market- 
ing director Mike Burba. 

Requirements defined in 
Optimal Trace can be imported 
to OptimalJ, forming the basis of 
use cases in Compuwares mod- 
el-driven tool for Java develop- 
ers, said Burba. Integration with 
Compuwares suite of testing 
tools, QACenter, enables teams 
to use requirements developed 
in Optimal Trace as the basis for 
quality assurance tests, he said. 

Both integrations were in 
place prior to Compuware's 
April acquisition of privately 
held SteelTrace, for approxi- 
mately US$20 million, in cash, 
he said. 

Optimal Trace fills a gap in 
Compuware's product line, 
replacing the company's re- 



quirements tool, Reconcile, 
with a more powerful offering. 
Burba said Reconcile focuses 
primarily on defining testing 
requirements and does not 
address the needs of develop- 
ment teams across the entire 
application life cycle. The com- 
pany will continue to support it, 
he said. 

Optimal Trace's approach to 
requirements management dif- 
fers from those of its Borland, 
IBM and Telelogic competitors, 
according to Burba. Those 
offerings are geared largely to 
tech professionals. But Optimal 
Trace is aimed at business users. 
Instead of asking users of the 
tool "to write a paragraph that 
describes the application's 
requirements," he said, Optimal 
Trace takes a more structured 
approach, using storyboards, 
with bubbles and arrows 
prompting users through check- 
lists of issues to consider. 

"What is the first thing you 
do; what is the second thing? 
What do you do if the PIN [per- 
sonal identification number] 
doesn't work?" he said, offering 
an example that describes the 
steps involved in an application 
that lets customers withdraw 
cash from an automated teller 
machine. 



Forrester analyst Carey 
Schwaber agreed that Com- 
puware's requirements solution 
differs from those of competi- 
tors. "What differentiates Opti- 
mal Trace is the fact that it has 
requirements-gathering capa- 
bilities in the first place." Most 
tools focus on requirements 
management alone, she said. 
"But people are starting to real- 
ize that it doesn't matter how 
well you manage your require- 
ments if you aren't dealing with 
the right requirements in the 
first place." 

Schwaber noted that Bor- 
land provides requirements 
gathering and requirements 
management tools, she said, 
referring to Caliber DefinelT 
and CaliberRM, respectively. 
"But Optimal Trace packages 
the two in a single tool." 

As Compuware continues to 
incorporate Optimal Trace into 
its product line, it plans integra- 
tions with ChangePoint, its tool 
for managing resource alloca- 
tion and other issues across a 
portfolio of development pro- 
jects, Burba said. For instance, 
tasks defined in ChangePoint, 
such as coding and database 
integration, will be tied to 
requirements that originated in 
Optimal Trace, he said. I 
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Compuware Optimal Trace takes a visual approach to requirements gathering, using bubbles and arrows to depict the 
steps involved in an order processing application, shown above. 
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, COMPANIES , 



Green Hills Software has announced that its Integrity real-time oper- 
ating system and its Velosity kernel have been awarded the highest 
level of certification under IEC-61508, a specification accepted by 
standards bodies for the safety of devices and systems for industrial 
control, automation and automotive applications . . . Polarion Soft- 
ware, of Stuttgart, Germany, has proposed an Eclipse project, called 
Subversive, that would create a Subversion source code version con- 
trol plug-in for the open-source framework. The plug-in 
would have functionality similar to the Eclipse CVS proj- 
ect. Polarion is contributing the current project codebase 
POiAMOrJ available to the Eclipse community under the EPL license; 
one of the goals is to offer API access to Subversive so users can lever- 
age its full functionality. The first release of the project is due in the 
fall on polarion.org. 



, NEW PRODUCTS , 



Austin, Texas-based start-up Phurnace Software has launched 
J2lnstall, a tool for automating J2EE configuration and deployment 
that the company says makes those applications easier to install and 
maintain, and lets developers focus on features, not installation. Phur- 
nace grew out of work begun at the McCombs School of Business at 
the University of Texas at Austin . . . Jcx.Software has announced 
plans to release a stand-alone version of its VS.Php editor later this 
year. The new VS.Php will be built around a basic Visual Studio skele- 
ton, and will be available in Q3 at US$150 per developer license. 



UPGRADES 



Vancouver, British Columbia-based eBusiness Applications released 
version 3 of its EBA Grid user interface component for building 
spreadsheet-style Web applications with _. p*j,r-™ Apih=™» 
new AJAX support in such features as . EBA Grid 



data binding and sorting. The company 
claims Grid V3, which targets ASP and PHP developers, goes beyond 
open-source frameworks such as Dojo, Prototype and DWR with 
features such as copy and paste, and in-place cell editing. It is 
available for free trial download at developer.ebusiness-apps.com 
. . . Elementool has released a version of its Elementool defect-track- 
ing tool as a plug-in for Microsoft's Visual Studio .NET 2005 develop- 
ment environment . . . DataMirror, which develops real-time integra- 
tion and data protection solutions, in late June released iCIuster 4.0, 
the latest version of its high-availability and disaster recovery solution 
for IBM's iSeries, with enhancements to performance and more cen- 
tralized monitoring and usability features. According to the company, 
version 4 uses parallel technology to achieve 2.5x faster application 
performance . . . BirdStep Technology on July 1 released RDM Server 
7.0, an update to its application-specific client/server database for 
high-availability applications on Linux, Unix 
D rd/tOO and windows * ln addition to what the company 
» claims is a 50 percent performance improve- 
ment over the previous engine, the new version supports VLDB (very 
large databases) and in-memory tables with as many as 18 guintillion 
records per table. The company also released RDM Mobile 5.0, an 
update to its embedded and mobile database for Linux, QNX, VxWorks 
and Windows that adds support for SQL92, network sets, named hier- 
archies and new data types . . . Embedded Linux developer Lynux- 
Works has released a version of its LynxOS-178 real-time operating 
system for safety-critical applications that 
integrates with ORB Express RT, the real-time 
CORBA object request broker from Objective 
Interface. LynxOS-178 is compliant with the FAA's D0-178B Level A 
specification for fail-safe aircraft control systems . . . SeeWhy 
Software has released SeeWhy Enterprise Edition, an event-stream 
processing solution that enables developers to build real-time 
business intelligence applications, metrics, alerts and actions that 
monitor events of existing middleware, SOAs and Web services. 
Platform support includes J2EE, JMS, XML and XSD. The cost is 
US$30,000 per server processor ► continued on page 22 
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TIBCO's Studio to Learn From the Past 

In next release of data management solution, historical data comes into play 



BY EDWARD J. CORREIA simulations using historical for late this year or early next. an additional means to evaluate 

TIBCO Software says it will data, giving managers the abili- According to Jeff Kristick, the efficiency of current and 

enable users of its Business Stu- ty to compare past results with TIBCO's senior director of simulated business processes, 

dio data integration and process future what-if scenarios, in a product marketing, Business "Let's say a company goes in 

management solution to create release of the product planned Studio 1.2 will offer managers and changes the claims process," 
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he said, using an insurance com- 
pany as an example. "If they use 
historical data, they can com- 
pare the changes against real 
history and by replaying it 
against actual data, see how the 
business is actually affected." 

The ability to easily create 
full process simulation scenar- 
ios using sample data has been 
available since version 1.1, 
released on June 27. Kristick 
said that version greatly simpli- 
fied the creation of simulations. 
"In 1.0, you could run through 
scenarios with a certain number 
of resources. We've made it 
easier to compare the results of 
simulation scenarios with a cou- 
ple of mouse clicks. In the first 
version it took a lot more work." 

Version 1.1 also introduced 
service-level agreement indica- 
tors, which permit developers to 
assign processes with a duration 
and threshold, "so that when 
you're simulating your process- 
es, you can see where you will 
exceed your SLA," Kristick said. 
"You can guarantee that an 
order is going to be processed 
within an hour," he said, for 
example. "Or you can see what 
kind of call volume will put you 
over your threshold." 

In the June release, TIBCO 
also added about two dozen 
predeveloped process designs. 
"To help speed development, 
we provide these samples across 
various vertical industries, such 
as insurance, employee provi- 
sioning, retail banking, mort- 
gage processing and other 
financial services industries. 
We've also enhanced the prod- 
uct so it's easier to import 
processes," he said. Pricing 
remains at US$5,000 per devel- 
oper seat. 

For its next release, TIBCO 
also is working on improving its 
collaborative capabilities, Kri- 
stick said. "We integrate with 
version control systems like 
[IBM Rational's] ClearCase, but 
we want to put in more than 
basic version control." 

The next edition, he added, 
will permit developers to con- 
trol attributes within a process, 
and to create small workgroups 
for document sharing and col- 
laboration. Kristick also said 
that Business Studio 1.2 is 
expected to support the XML 
Process Definition Language 
(XPDL) 2.0 and interoperate 
with BPMN. I 
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Microsoft Gets More Open With Document Formats 



BY P.J. CONNOLLY 

Microsoft moved closer to exist- 
ing open document formats with 
the July launch of the Open 
XML Translator project, an 
open-source effort the company 
says is intended to create tools 
that bridge the gap between the 
OASIS OpenDocument Format 
(ODF) specification and its own 
Open XML file formats. 

The tools will be provided as 
free downloads for older ver- 
sions of Microsoft Office as well 
as the delayed-again Office 
2007, and will be licensed as 
open-source software. 

A prototype of the first trans- 
lator — for Word 2007 — is avail- 
able on SourceForge; a complete 
version is expected at the end of 
this year. Excel and PowerPoint 
translators are due in 2007; 
Microsoft's plans call for Open 
XML format support and the 
translation tools to be backport- 
ed to older versions of Office via 
a free Compatibility Pack. 

The news followed upon 

MyEclipse 
Adds Matisse 

BY ALEX HANDY 

Genuitec's MyEclipse 5.0 
package reached milestone 2 
in July with the addition of the 
Matisse4MyEclipse user inter- 
face builder, visual Hibernate 
mapping, expanded UML sup- 
port and visual JavaServer 
Faces development. 

MyEclipse 5.0 is based on 
the recently available Callisto 
3.2 release of Eclipse. In addi- 
tion to the features included 
with Callisto, MyEclipse has 
expanded Struts support and 
expanded support for Micro- 
soft SQL Server. The included 
version of the Matisse GUI 
builder was originally created 
by Sun Microsystems for Net- 
Beans but was brought over to 
the Eclipse community after 
Sun made the tool open-source 
in April. 

MyEclipse 5.0, which sells 
for US$30 to $50, is expected to 
be available on Aug. 4 for Linux, 
Mac OS, Unix and Windows. 

Currently, however, the 
Matisse GUI builder does not 
work under the Mac OS due to 
a long-standing bug. The final 
release of MyEclipse will also 
include further international- 
ization options for the IDE's 
interface. I 



Microsoft's admission of yet 
another delay in Office 2007. In 
an attempt to resolve perfor- 
mance and other quality issues, 
final delivery — which had been 
scheduled for October — has 
been pushed back to the end of 



the year for volume customers. 

ODF OK BY GPL 

The OpenDocument Format 
has been determined to be 
GNU General Public License- 
compatible, in the opinion of 



the Software Freedom Law 
Center. As such, open-source 
developers can legally imple- 
ment the specification in their 
work without fear of infringing 
on patents or copyrights. 

With the number of lawsuits 



over intellectual property 
seeming to grow, open-source 
developers have been slow to 
put into their code anything 
that might not be compatible 
with the GPL, according to the 
law center. I 
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With CentraSite Now Free, 
There's Governance for All 

Community, Enterprise editions include UDDI 3, 
AJAX-based Ul and an Eclipse registry browser 

BY EDWARD J. CORREIA 

With governance getting much of the 
SOA industry's attention these days, its 
pricing curve took a new turn on July 
11 with the release of CentraSite Com- 
munity Edition, a free version of the 
SOA repository and management sys- 
tem developed by Fujitsu and Software 
AG. 

The Community Edition, as well as 
Enterprise Edition 2.1 — also released 
on July 11 — include a UDDI 3.0-com- 
pliant repository with UDDI search 
capabilities, a totally redesigned AJAX- 
based user interface, an Eclipse- 
based registry browser and repository 
access through Web-based Distributed 
Authoring and Versioning (WebDAV), 
the HTTP extensions that permit edit- 
ing files on remote Web servers. 

"There's a great need for SOA gov- 
ernance these days, and we wanted to 
make it easy to [deploy] those fea- 
tures," said Ivo Totev, vice president of 
global marketing for Crossvision, Soft- 
ware AG's SOA suite. "As far as we 
know, it's the only repository that 
comes for free," he said. 

The free version, for Linux, Solaris 
and Windows, also delivers user-based 
role management, LDAP authentica- 
tion and predefined data models and 
reports, the latter of which enables 
developers to register services and 
their dependencies on other services. 
"[CentraSite] can display what other 
services are impacted by changes," said 
Keith Swenson, vice president of R&D 
at Fujitsu. 

For US$50,000 per server processor, 
CentraSite Enterprise Edition adds reg- 
istry access and tight coupling with Java 
apps through the Java API for XML 
Registries (JAX-R) and access to the reg- 
istry and repository using the XQuery 
API for Java (XQJ). Enterprise also 
includes an extended data model, which 
Swenson said permits developers to 
"extend the data schema and use it in 
more powerful queries and reports." 

Beyond dependency checking, the 
Enterprise Edition also offers notifica- 
tions, which can alert developers or 
other IT staff to changes in services 
that their services might depend on. "A 
user can go to a service and say, T want 
to be notified when this changes or 
when a service is linked to [mine],'" 
said Swenson. The enterprise version 
also adds features for high availability 
and monitoring and supports multiple 
processors and enhanced authentica- 
tion. But the key differentiator for 



Developers can be notified when services they 
depend on change, says SoftwareAG's Totev. 

CentraSite is not the technology, 
asserted Swenson, "but management 
and governance — [the ability to] track 
what's out there and what you can use 
safely." As an SOA developer, added 
Totev, the main benefit "is to be noti- 
fied if my service changes or if any of 
the services my service depends on 
change." 

IT TAKES A COMMUNITY 

Fujitsu and Software AG also have 
launched CentraSite Community, where 
developers, integrators and ISVs can 
download the CentraSite Community 
Edition and collaborate to deliver inter- 
operable SOA solutions. 

"We're delivering a variety of middle- 
ware pieces, and we want them to work 
with each other and with the communi- 
ty," said Swenson of the site, which also 
will include case studies, best practices, 
guidelines and FAQs, as well as blogs 
and a discussion forum. 

According to Totev, initial partners 
include Amberpoint, which will add run- 
time governance; ILOG, for rules man- 
agement; IDS Scheer, for business 
process management; security from Lay- 
er 7 and Forum Systems; and testing 
tools from Mindreef. Also on board is 
Mindjet, which Totev said will "provide 
the capability to display interdependen- 
ces between services and policies 
processes." 

CentraSite Enterprise and Commu- 
nity editions are both available now; the 
latter can be downloaded at the commu- 
nity site (www.soaworks.com). I 
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Parasoft's WebKing Aims for Zero False Positives 



BY ALEX HANDY 

Parasoft's WebKing 5.5, re- 
leased in mid-July, adds the 
ability to fine-tune regression 
tests to apply to small sections 
of Web applications, thus ignor- 



ing other areas that may trigger 
false error alarms. The new 
software also adds tests that can 
evaluate a Web application's 
accessibility to the disabled. 
Parasoft claims that Web- 



King 5.5 can automatically 
ignore content changes on pre- 
determined pages, focusing its 
tests on the static forms, boxes 
and buttons that otherwise pop- 
ulate such pages. This enables 



developers to run regression 
tests on their Web applications 
as they evolve and without wor- 
rying about digging through 
large log files of errors related 
to shifting design and content 
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elsewhere in the pages. 

WebKing 5.5 also adds sup- 
port for HttpUnit tests — unit 
tests for Web applications that 
are written in a similar way to 
those done with JUnit. Web- 
Kings HttpUnit tests can be 
written in Java and executed 
from within WebKing 5.5. The 
application is primarily designed 
for use with a GUI-based test 
builder, however. 

WebKing 5.5 is available now 
for Linux, Solaris and Windows. 
It costs US$3,995 per user. I 

AppVision 5.0 

Tracks Errors From 
Inside and Out 

BY ALEX HANDY 

NVision Software released App- 
Vision 5.0 in mid July, claiming 
that its monitoring software can 
now observe the errors and 
faults that occur outside of an 
application server's runtime, 
extending its monitoring capa- 
bilities to external databases, 
applications and services. 

Johnny Anderson, CEO of 
NVision, said that his company's 
software formerly monitored 
applications only from inside the 
runtime — be it Java or .NET — 
which allowed for a view of prob- 
lems at the application level. But 
in version 5.0, he said, the soft- 
ware can now gather diagnostic 
information typically left to the 
user (generally a SysOp) by con- 
tacting external servers and ser- 
vices, and automatically gather- 
ing forensic information related 
to the errors. 

Anderson laid out an exam- 
ple of how this works. "From 
inside the application, we see 
something like a SQL data 
client error. There was a SQL 
data client error because that 
client's request wasn't returned. 
[AppVision] can look to see if 
the database is up, [and] can 
look inside the table and see if 
those data elements are avail- 
able. It can bring in all that info, 
package it into an e-mail, and 
send it to the person who needs 
to fix it," said Anderson. 

AppVision 5.0 is available 
today for .NET and Java for 
US$2,495 per monitored server, 
plus additional costs incurred 
for specific functionality. Ander- 
son said a typical deployment 
costs around $100,000. I 
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WebLogic Server 9.2 Keeps Going. . .and Going 

BEA says rolling update capability minimizes app server downtime, eases administration 



BY ALEX HANDY 

Companies using WebLogic 
8.1 will not have to down their 
servers or rewrite applications 
to upgrade to the latest ver- 
sion. So says BEA Systems, 
which in mid-July released 
WebLogic Server 9.2, claiming 
that the system can now per- 
form rolling updates with zero 
downtime. 

The company also updated 
the Portal and Workshop compo- 
nents of its WebLogic Platform, 
bringing both to version 9.2. 

"It's hot-swappable soft- 
ware," claimed Guy Church- 
ward, vice president of the 
company's Java runtime prod- 
ucts group. That, he said, 
means a node can be taken 
offline and removed without 
the need to stop any of the 
activities being performed by 
the rest of the cluster. 

Churchward said that Web- 
Logic Server's rolling updates 
capability can compensate for 
dead nodes in the cluster in 
which it is running. "You can 
take the applications running 
live on the server, flip them onto 
other servers, then take the 
node out," said Churchward. 

BEA also has updated the 
administration tooling in Web- 
Logic Server 9.2. Churchward 
admitted that previous editions 
of WebLogic were not adept at 
handling large numbers of 
accounts, and that the new ver- 
sion has added capabilities 
specifically targeted at adminis- 
tering the accounts of vast num- 
bers of users instead of doing 
each one by hand. 

Workshop for WebLogic 
9.2, said Churchward, is the 
company's first Eclipse-based 
IDE release. "8.1 was around 
proprietary software; we want- 
ed to move to open source," 
said Churchward. 

'PRICE OF ADMISSION' 

But Jason Bloomberg, senior 
analyst at ZapThink, said that 
BE As long-awaited switch to 
an Eclipse-based IDE isn't 
going to win it any new cus- 
tomers. "I would say it's 
becoming a prerequisite for 
developer tools at this point. 
Everybody is expecting Eclipse 
now. You wouldn't want to have 
a tool like Workshop that didn't 
support Eclipse. That being 
said, it's not a differentiator; it's 
just the price of admission." 



Churchward said the up- 
dated portal software makes 
heavy use of Web Services for 
Remote Portlets (WSRP), the 
OASIS specification that 



defines a method for Web ser- 
vices to be treated as modular 
components within a Web 
page. "It allows you to take 
existing assets from a portal 



and redeploy them into a dif- 
ferent portal usage case," said 
Churchward. This, he added, 
speeds development time by 
eliminating the need for all 



aspects of a designed site to be 
in place before it can go live. 

BE As WebLogic platform 
costs around US$57,000 per 
server processor. I 
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Perforce 2006 
Gets in Sync With 
Visual Studio 2005 






BY ALEX HANDY 

Perforce Software added sup- 
port for Visual Studio 2005 to 
its source code management 
platform in early July with the 
release of Perforce 2006.1, and 
the company claims that cus- 
tomers required to comply with 
Sarbanes-Oxley laws will find 
that new audit features make 
their lives easier. 

Nigel Chanter, COO of 
Alameda, Calif.-based Per- 
force, said that many of his 
company's clients were asking 
for better auditing capabilities 
from the SCM system. "We 
have been able to provide this 
kind of data before, but it is 
now more comprehensive and 
more straightforward to use," 
said Chanter of the new audit 
capabilities. "You hit the audit 
button and you get a nice 
report. Anytime anyone has 



touched a file, it is logged: who 
touched it, who modified it, 
when those changes were 
made... this is all very crucial to 
Sarbanes-Oxley compliance." 

John Walker, product con- 
sultant for Perforce, said, "In 
the past, customers used the 
Web client a great deal for 
reporting. Now you can turn 
this into a Web daemon. If you 
want to know when a task 
has been updated, that info 
will be sent to you pretty much 
in real time." 

Perforce 2006.1 also in- 
cludes support for custom RSS 
feeds. Walker said that devel- 
opers can subscribe to RSS 
feeds that detail the activities 
inside of the Perforce server. 
These activities can include 
everything from code check- 
ins to branching of existing 
sources. These feeds, said 
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Perforce 2006.1 adds some minor GUI tweaks and RSS feeds to keep developers on top of new changes. 



Walker, allow developers to 
see the activities going on 
inside the SCM server in near 
real time. 

Chanter said the SCM sys- 
tem now includes many bug 
fixes and some minor user 
interface tweaks to increase 



usability. Branching and merg- 
ing capabilities also have been 
improved, he said, with specif- 
ic attention paid to the process 
of merging two files together. 
The process, claimed Chanter, 
is now much faster and more 
reliable. 



Perforce 2006.1 runs on 
Linux, Mac OS X, Unix and 
Windows. Pricing starts at 
US$800 per user per year, in- 
cluding service and support. 
This update is available for free 
to all currently subscribed Per- 
force customers. I 
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PeopleTools 8.48 Automates SOA Deployment 

Oracle update turns interfaces into services, prepares applications for PeopleSoft 9 



BY EDWARD J. CORREIA 

With capabilities in People- 
Tools 8.48, Oracle says that the 
interfaces of PeopleSoft appli- 
cations can now be automatical- 
ly published as standards-based 
Web services. The tools began 
shipping on July 17. 

According to Jose Lazares, 
Oracle's senior director of 
product strategy, a new Service 
Designer component does 
most of the work of preparing a 
company's ERP, CRM and 
financial apps for consumption 
in a service-oriented architec- 
ture. "It automatically converts 
all interfaces into service oper- 
ations" that Lazares said com- 
ply with WS- Security, WS- 
Addressing, WSI 1.0, UDDI, 
WSDL and other standards. 
"PeopleSoft supports multiple 
schemas with thousands of 
interfaces between systems, 
and those would all be available 
as Web services," he added. 

Lazares said the tools work 
with Oracle's Fusion middleware 
as well as most other middle- 
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ware. "Any middleware 
you're using can intro- 
spect into the registry. As 
long as their middleware 
supports W3C stan- 
dards, they should be 
interoperable." 

He also claimed that 
Service Designer doesn't 
disturb pre-existing 
work. "For example, if a 
customer has created an 
integration, we convert 
that to a service opera- 
tion and publish it, but 
we would also maintain 
the implementation they 
had previously." 

The tools, which are 
designed for PeopleSoft 

9 applications, also A browser-based wizard simplifies the job of publishing PeopleSoft apps, says Oracle. 
are backward compatible 




with version 8.4. 

Also new in PeopleTools 
8.48 is Change Impact Analyz- 
er, a self-contained testing envi- 
ronment that Lazares said per- 
mits developers to see the 
effect of application changes 
prior to deployment. He said 



the feature should help cus- 
tomers preparing for migration 
from PeopleSoft 8.4 to version 
9.0, released in June. "You can 
view these side by side and 
visually review functionality." 

The tool also lets developers 
take multiple operations, put 



them in sequence and test them 
as Web services. "Let's say you 
took an order creator and pub- 
lished it as a service. An API call 
would automatically generate 
create- and delete-service opera- 
tions. This gives [developers] 
better management and impact 



analysis," he said. The test bed 
prevents changes to the underly- 
ing API from affecting users. 
"You know you have to make the 
following changes to keep the 
Web service in sync," he said 
hypothetically 

Oracle now bundles XML 
Publisher, a US$40,000-per- 
server processor report genera- 
tor, free with PeopleTools 8.48, 
which itself is a free upgrade for 
current maintenance customers. 
A set of new XML Publisher wiz- 
ards simplify report generation 
for nondevelopers. 

This enables business analysts 
to use Word or their document 
formatting or publishing tool of 
choice to transform PeopleSoft 
XML documents to invoices, 
memos or other business forms. 
"Those get tied to a translation 
[process] and, at runtime, get 
published." Wizards and tem- 
plates simplify the exposing and 
publishing of documents, he said. 
"It also allows for the mapping of 
changes to the reports without 
going down to the code level." I 
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Automated Attacks Lead Web Hazards 

Study of assaults on Web apps bolsters conventional wisdom, reveals new trends 



BY P.J. CONNOLLY 

Fortify Software released last 
month the results of what the 
company calls the first empirical 
study of security threats to Web- 
based applications. The data was 
gathered from sites running the 
company's Fortify Application 
Defense security "wrapper" 
product, and was collected over 
the first six months of 2006. 

Brian Chess, Fortifys chief 
scientist, explained the study 
"looked at data from dozens of 
Web sites... more than 100 mil- 
lion requests, and we've taken it, 
and cataloged it, and tried to 
break down what are the trends, 
and what do we see going on, in 
terms of people attacking Web- 
based applications." 

The data revealed four 
major trends, some of which 
reflect conventional wisdom, 
and others that represent hith- 
erto little-noticed dangers. 
Automated attacks — so-called 
"bot storming" — were the most 
common means of probing 
Web applications; the company 
found that between 50 percent 



and 70 percent of attacks came 
from these random "door- 
rattling" methods. 

The second — and a disturb- 
ing trend for those concerned 
with application security — is 
what Fortify called the rise of 
"Google hacking." The Google 
index can contain much more 
than just software version num- 
bers, which are invaluable 



themselves; stack traces and 
other data that should never 
cross the firewall can often be 
found as well. 

In addition, the study noted 
that directed attacks — target- 
ing a specific site or applica- 
tion — remain a danger, with 
the favorite means of subver- 
sion being buffer overflow 
attacks, cross-site scripting and 



SQL injection. 

Finally, the report observes 
that Web application attacks are 
global in nature and assisted by 
anonymizing techniques, such 
as the BSD-based Anonym. OS, 
proxy servers or other obfuscat- 
ing means. The United States 
remains the primary launching 
pad for these assaults, accord- 
ing to the data. 



Chess believes that much of 
the problem with Web security 
comes from applications being 
designed without a thought to 
securing them. "[Developers] 
can't ignore security while 
they're building the application, 
and then expect some opera- 
tions person, or some third-par- 
ty product to come in and fix all 
of their security for them." I 



AppScan Still Fighting Hack Attacks 



BY JENNIFER DEJONG 

Watchfire has reinforced its 
10-year-old black-box testing 
tool, adding support for Web 
services and payment card 
industry data standards. 

The Waltham, Mass. -based 
company was expected last 
month to announce AppScan 
6.5, which, unlike the previous 
version, can test Web services 
code to make sure it is not vul- 
nerable to attacks such as cross- 
site scripting errors and SQL 
injections, said Watchfire direc- 
tor of marketing David Grant. 



"That's important for compa- 
nies going into production with 
Web services." 

The use of Web services is 
increasingly commonplace in 
customer- facing applications, 
which rely on the technology as 
a means of integration, he 
explained. "This release broad- 
ens the types of security App- 
Scan can test for." 

AppScan, which competes 
with offerings from Atlanta- 
based SPI Dynamics and Santa 
Clara-based Cenzic, among oth- 
ers, is a so-called black box 



security tool that tests applica- 
tions for vulnerabilities by 
attacking them in the much the 
same way a hacker might. 
Cross-site scripting, where 
hackers embed malicious scripts 
on Web pages, and SQL injec- 
tions, which get at key data that 
is meant to be protected, are 
two of the most widespread 
Web application attacks, noted 
Grant. 

Payment Card Industry 
(PCI) is a set of security stan- 
dards issued by Visa and 
MasterCard that mandates, 



among other things, that Web 
merchants who publish the Visa 
and MasterCard logos on their 
sites must demonstrate that 
they have taken proper mea- 
sures to protect customer credit 
card numbers, said Grant. App- 
Scan 6.5 provides guidelines to 
help developers build payment 
apps that comply with those 
standards. Guidelines explain, 
for example, best practices for 
fixing cross-site scripting errors, 
and how to implement them in 
code, he said. 

Also new to AppScan, which 
debuted in 1996, is the ability 
to detect weak user name and 
password combinations. I 
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TechExcel Adds Project Planning to DevTrack 



BY ALEX HANDY 

TechExcel's popular DevTrack 
issue tracking system can now be 
expanded into the project man- 
agement and planning space 
with the company's new Dev- 



Plan add-on. DevPlan will be 
available in early August and will 
offer teams a way to plan future 
coding while taking past bugs 
into account. 

Paul Unterberg, project man- 



ager at TechExcel, said devel- 
opers used to working with Mi- 
crosoft Project will feel right at 
home with DevPlan. "It's similar 
to Microsoft Project's gantt chart 
editor. You edit the durations 



and timelines, then you have 
tabs along the bottom to edit 
additional properties," he said, 
describing the user interface. 

The US$1,500 per-seat Dev- 
Plan installs atop DevTrack En- 
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terprise Edition, and handles 
many DevTrack tasks automati- 
cally, including subproject cre- 
ation. "Managers design their 
plans, then those plans are not 
only published to the report but 
also make a framework for what 
you have to do in DevTrack," 
said Unterberg. "You edit the 
plan like a normal project plan." 

DevPlan s new features tie 
into the added functionality of 
DevTrack 6.1, which will be 
released at the same time as 
DevPlan. In addition to laying 
the ground work for DevPlan 
integration, DevTrack 6.1 will 
add support for embedded 
HTML in issue descriptions and 
optionally tie into build man- 
agement systems. 

A browser-based interface is 
planned for early 2007, Unter- 
berg said. The software currently 
outputs reports in HTML so they 
can be viewed within a browser. I 

New Toads 
Released For 
DB2, SQL Server 

BY P.J. CONNOLLY 

Quest Software shipped new 
versions of its database admin- 
istration and development tools 
last month. Toad for DB2 2.0 
and Toad for SQL Server 2.0 
join Toad for MySQL 2.0— 
released in May — and Toad for 
Oracle 8.6 in Quests database 
management and support port- 
folio. Quest expects to ship a 
new release of Toad for Oracle 
by the end of the year. 

Billy Bosworth, Quest's 
director of product management 
for database solutions, acknowl- 
edged that the first release of 
Toad for SQL Server merely 
delivered functionality equiva- 
lent to Microsoft's own tools, but 
that the new release "has the 
features and functionality that 
our customer base has been ask- 
ing for, but also some integra- 
tion" with Quest's other data- 
base tools. Both the DB2 and 
SQL Server versions of Toad 
offer enhanced reporting tools, 
and support for so-called "col- 
lapsible code regions" to make 
browsing code go more quickly. 

Toad for DB2 starts at 
US$870 per seat with one year 
of maintenance, while Toad for 
SQL Server begins at $470 for 
the same term. Each is avail- 
able in Professional, "Xpert" 
and Suite editions, with 
increasing functionality and 
price tags to match. I 
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Steeling for Ruby in Visual Studio 2005 



BY ALEX HANDY 

SapphireSteel Software, a 
British programming project, 
has released a third beta ver- 
sion of Ruby in Steel, a Ruby 
add-in for Visual Studio 2005. 
The add-in brings development 



and debugging support for the 
upstart language into Micro- 
soft's ubiquitous IDE. 

SapphireSteel, owned by 
U.K. -based Rosedown Mill, 
hopes to offer a commercial ver- 
sion of the tool by year's end, but 



it plans on keeping a standard 
edition available as free software. 

Ruby in Steel offers syntax 
highlighting and code coloring 
for developers. 

Debugging features include 
breakpoints and step-into and 



step-over capabilities. 

Huw Collingbourne, project 
director of Ruby in Steel, said 
that the add-in offers the same 
language integration with Visu- 
al Studio as developers see with 
C#orC+ + . 
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In the current beta, for 
example, the Visual Studio Solu- 
tion Manager [the tool used to 
organize the files in a project] 
shows groups of files in a 
tree-structured hierarchy," said 
Collingbourne. "This is particu- 
larly important for programmers 
working on Ruby on Rails appli- 
cations since these are typically 
made up of a large number 
of subdirectories containing 
numerous different files. With- 
out built-in solution manage- 
ment, it can be notoriously diffi- 
cult to navigate all those 
directories when you want to 
work on one or several related 
source code files at a time." 

Collingbourne said that he 
decided to embark upon the 
construction of Ruby in Steel 
because he loved all of the fea- 
tures of Visual Studio but had 
to give them up in order to code 
in Ruby since the IDE didn't 
speak the language. 

"Frankly, the one thing that 
prevented me [from] embarking 
on a Ruby programming project 
of any complexity was the lack of 
a really good development envi- 
ronment," said Collingbourne. 

Microsoft hasn't yet taken 
much notice of this small pro- 
ject but is happy to see innova- 
tion taking place in the Visual 
Studio community. "It's always 
great to see companies recog- 
nize the value of Visual Studio 
and provide a new community 
of developers with more flexi- 
bility in building and deploying 
their Web applications," said 
Keith Smith, senior product 
manager on the Web Platform 
and Tools team at Microsoft. 

Smith would not say if 
Microsoft will support the 
nascent project. That's under- 
standable, however, as Colling- 
bourne stated that Ruby in Steel 
has been downloaded fewer 
than 400 times since the first 
beta was released in April. 

"Over the next five months 
or so, as we work toward our 
first full commercial release, we 
are going to be adding features 
that have never previously been 
available to Ruby program- 
mers," said Collingbourne, 
speaking of his vision for the 
future of Ruby in Steel. Colling- 
bourne said the team hopes to 
add expanded syntax highlight- 
ing and Intellisense code com- 
pletion to future editions. 

Ruby in Steel, available at 
www.sapphiresteel.com, is at 
version 0.7 as of this writing. I 
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FireStar Claims Hibernate Violates Patent 



< continued from page 1 

source consultant. 

Bernard Golden, CEO of 
open-source consulting firm 
Navica, said he believes the 
patent is without merit. "[Some 
of my clients say,] 'Mapping 
object code to relational data- 
bases? How do you patent that? 
There's plenty of prior art,'" 
said Golden of his clients' reac- 
tions. "Whether it's valid or not, 
it creates a risk because it's cre- 
ated confusion," he added. 

That confusion, however, 
doesn't yet seem to be pushing 
his clients away from consider- 
ing Hibernate for their object 
persistence needs, said Golden. 

But Diane Peters, director of 
the Software Freedom Law 
Center, which provides legal rep- 
resentation and other services to 
protect free and open-source 
software, said that Red Hat 
might not be harmed as much 
by the suit as Hibernate users 
might be. "Anytime a patent is 
found enforceable in court, it 
increases the value of that 
patent and the ability to take it 
onto a new company," she said. 

GPL HAS LITTLE BEARING 

Eben Moglen, chairman of the 
Software Freedom Law Center, 
said the license under which 
Hibernate is distributed, the 
Lesser GPL, has little bearing 
on this case. "The copyright 
license downstream can't really 
be used to control whether soft- 
ware should be patented," said 
Moglen. 

He went on to say that the 
newest revision of the GPL, due 
out in late July, will not address 
patent issues in any way that 
could affect this or future 
infringement suits. "You want 
the people who have the patent 
claims who are distributing that 
software to respect users' 
rights," said Moglen, adding that 
the GPL will seek only to pro- 
tect users from being sued over 
the use of specifically patented 
GPL code and not methods 
patents such as FireStar's. 

Peters believes the lawsuit 
heralds the arrival of open 
source into the mainstream. 
"I'd start with the premise that 
this could easily have happened 
to a proprietary company as it 
could have happened to Red 
Hat. It demonstrates how main- 
stream open source and Linux 
have become: It's a cost of 
doing business," said Peters. 



Peters also said that it's like- 
ly FireStar looked at numerous 
targets for its suit. 

"Oracle is a company that is 
significantly bigger, and more 
equipped to defend itself. That's 



one of the factors that FireStar 
looked at, I'm sure, when look- 
ing for a defendant. I saw one 
person comment that Red Hat 
was just the right size. Not too 
big, not too little. Oracle also has 



patents that might be dangerous 
to [FireStar]," said Peters. 

FireStar acquired this patent 
and the minds behind it when it 
purchased object technology 
developer Ontos in 2001. The 



patent, No. 6,101,502, was grant- 
ed in August 2000. FireStar 
would not return phone calls 
requesting comment; Red Hat 
said it does not comment on 
pending litigation. I 
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.INFRASTRUCTURE LOG 

_DAY 15: This project's out of control. The development 
team's trying to write apps supporting a service oriented 
architecture, but it's taking forever. Gil's resorted to 
giving them all coffee IVs. Now they're on Java while using 
JAVA. Oh, the irony. 

_DAY 16: Big crisis — we've just run out of half-and-half!! 

_DAY 18: I've found a better way: IBM Rational. It's a 
modular software development platform based on Eclipse 
that helps the team model, assemble, deploy and manage 
service oriented architecture projects. The whole process 
is simpler and faster, and all our apps are flexible and 
reusable. The software we write today will be the software 
we use tomorrow. :) 

_The team says it's nice to taste coffee again, but actually 
drinking it is sooo inefficient! 
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Remote Web Monitoring 
Added to AccMonitor 
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BY ALEX HANDY 

HiSoftware's AccMonitor keeps 
a watchful eye on Web sites, 
checking for broken links, stan- 
dards compliance issues, perfor- 
mance snags and hidden files left 
over from long-gone employees. 
The company in late June updat- 
ed its Site Quality Module for 
AccMonitor to version 10, and I 
has added a new hosted version 
of the product for companies 
that don't want to subscribe or 
purchase a perpetual license. 

Kurt Muffelmann, president 
and CEO of HiSoftware, said 
that his company's flagship mon- 
itoring suite can be set to poke at 
Web servers at regular intervals, AccMonitor's updated Site Quality Module can test links, 
anywhere from once a month to monitor site layout and design, and find broken images, 
once every five minutes. When then automatically alert administrators of the errors. 
doing so, it can check all links, 
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images, HTML and meta-data within 
the site. If any of these become broken, 
said Muffelmann, AccMonitor will auto- 
matically send an e-mail, page or voice 
call to the people who need to be 
informed of the problem. 

Dana Simberkoff, HiSoftware's vice 
president of business development, also 
pointed out that her company has 
released a software development kit 
along with version 10 of its Site Quality 
Module, to allow developers to program 
their sites with these quality checks in 
mind ahead of time. The company's 
SDK supports any language that can be 
used to develop for the Web. 

Site Quality Module 10 is available 



now, and adds remote monitoring capa- 
bilities to AccMonitor. The new version 
includes the ability to monitor changes 
made to the site, and to send notifica- 
tions to an administrator as they are 
made. 

AccMonitor is available only for Win- 
dows, though it can monitor any Web 
site. The tool can also be installed local- 
ly on a Windows Web server, and can 
ferret out hidden files left on the server 
without links. This helps to find data left 
over or hidden by previous employees 
and developers. 

AccMonitor costs US$25,000 per 
year, and can be used to scan an unlim- 
ited number of servers. I 
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MORE UPGRADES 



< continued from page 5 

per year . . . ProSyst's JProfiler 4.0 was 

released in July, featuring added support 
for Eclipse 3.2. The tool features a 1MB 
memory footprint and many new visualiza- 
tion options for viewing JVM activities. 
A free trial version is available at 
dz.prosyst.com . . . Objective Interface has 
announced that ORBexpress now inte- 
grates with Rhapsody, the model-driven 
development environment for embedded 
systems Telelogic Systems acguired along 
with l-Logix in March ... No Magic has 
announced the release of MagicDraw UML 
11.5, which adds the ability to export Magic- 
Draw models based on UML 2.0 Eclipse 
Modeling Framework via the XML Metada- 
ta Interchange (XMI), a part of the Model 
Driven Architecture framework led by 
Object Management Group. The tool also 
offers new "model decomposition" capabil- 



ities and interface improvements, and is 
available under a number of licensing 
schemes. 



PEOPLE 




Ingres has named Roger 
Burkhardt president and 
COO. Burkhardt had been 
with NYSE Group since 
2000, where as CTO and 
EVP, he oversaw the 
BURKHARDT building and deployment 
of the New York Stock Exchange's first 
automatic transaction execution service 
. . . Adesso Systems has named John Van 
Siclen CEO, as the company launches its 
AppsNow software-as-a-service platform 
and marketplace for developing, customiz- 
ing and deploying mobile applications. Van 
Siclen fills the job that was held on an 
interim basis by company chairman and 
CTO John Landry. I 
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BMI BPMN 



What it stands for: 


extended Business 
Modeling Language 


Business Process 
Modeling Notation 


Standard: 


Closed & proprietary 


Open & community-driven 


If it's not a language, 
what is it? 


Methodology 


Notation scheme 


Maintainer: 


xBML Innovations 
and its affiliates 


Object Management Group 


Vendor support: 


xBML Innovations 
and its affiliates 


36 vendors shipping product; 
four more with plans 



Focus: 



Business-driven 



Programming-driven 



xBML Tries to Provide 
Business Model Alternative 



* continued from page 1 

centralized, secure repository for xBML 
business models — and offers read-only 
access to models containing the other 
xBML dimensions: "when" (the time 
frames involved), "where" (location-spe- 
cific data) and "who" (the authority for 
each activity). 

XBML: A BETTER MOUSETRAP? 

The eXtended Business Modeling Lan- 
guage was initially developed by Business 
Genetics, an affiliate of xBML Innova- 
tions. "Our mission is to scientifically 
describe how business operates," said 
Steve Baker, co-founder and a managing 
partner of both xBML Innovations and 
Business Genetics. He describes xBML 
and the tools it uses as a way to make 
development more efficient by combining 
modeling and requirements gathering. 
"The business models based on [xBML] 
are the requirements; there is no require- 
ments gathering process in that haphaz- 
ard way that's done currently." 

The result is, according to Baker, "a 
structured, methodical way of describing 
the business. Once described, you can 
decide what to automate, and then that 
part of the model can be converted into 
requirements for technology solutions." 

Baker is convinced that his company 
has built a better mousetrap than solu- 
tions based on BPMN, which he referred 
to as "an abstraction of BPEL [Business 
Process Execution Language]... that no 
human should ever have to look at." Both 
he and xBML co-founder Cedric Tyler 
characterized BPMN as a technology so 
complex as to be unusable. 

"Its a fine way to describe what BPEL 
is doing, if you want to talk among the 
technical people," but it's no way to talk to 
a CEO to discuss the business and how to 
support it from a technology perspective, 
Baker noted. "Object-oriented design is a 
fantastic way to describe how a system's 
going to operate and how you're going to 
get reuse out of your investment in build- 
ing that system. But it's not a great way to 
relate to business." 

OMG took over responsibility for 
BPMN last year, and in March released a 



"final adopted" 1.0 specification for 
BPMN. OMG chairman and CEO 
Richard Soley took mild exception to the 
characterization of BPMN as overly com- 
plicated, asking rhetorically, "Is it simple 
enough for a wide variety of users? Is it 
useful enough that vendors will imple- 
ment it?" Answering his own questions, 
he noted, "Obviously, yes, because there 
are dozens of implementations." 

Jeanne Baker, co-chair of the OMG's 
Business Modeling and Integration task 
force, sees BPMN's strength as being its 
support for abstract processes that defy 
automation, as well as those processes 
that one can easily transform into exe- 
cutable programs. She observed, "A lot of 
what goes on in business is... tribal cul- 
ture, locked in people's heads." 

According to Forrester Research ana- 
lyst Colin Teubner, it's easy to see why 
Business Genetics and xBML Innova- 
tions believe they have a world-changing 
technology on their hands. "The stan- 
dards community hasn't done a great job 
so far of getting a process standard to 
stick, so maybe Business Genetics is 
thinking, 'We can promote [xBML].'" 

Gartner vice president and distin- 
guished analyst Bill Rosser has been fol- 
lowing Business Genetics and xBML 
Innovations for about four years. He dis- 
cussed the difficulty in reconciling IT's 
programming-centric view with that of 
the rest of the business. "The purpose [of 
object-oriented design] was to make the 
process of programming easy, and in 
effect, I think that's remained the case. 
What we have. . . [are] these various kinds 
of notations for business processes [that] 
are focused on the system implementa- 
tion, the task of the code." 

He went on, "But by their nature, this 
is completely different and contrary to 
the manner in which the business people 
think about their business process." 

Rosser sees xBML and BPMN as 
being complementary rather than com- 
peting technologies. "You do have these 
two quite different purposes... one is to 
create a model that the user can look at, 
and understand, and comprehend, and 
get excited about, and hopefully, own." I 
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MICROSOFT DEVELOPERS 



THINGS THEY LOVE ABOUT VISUAL STUDIO 2005 



Nothing in Visual Studio 2005 came as a surprise to Microsoft developers. 
Between the beta releases and the steady flow of Community Technical Pre- 
views, most were familiar with the productivity enhancements in the updated IDE 
long before its official release. We asked them to weigh in on which features are 
most useful in easing the daily grind. Here's a sampling of what they had to say. 



CODE SNIPPETS 

"I'm happily surprised at how easy it is to cre- 
ate your own code snippets for both code and 
XML configuration files. I use them extensively 
for repetitive snippets and for live presenta- 
tions. The Code Snippet Manager dialog could 
be a little more user-friendly; I had to play 
around with it to figure out how to hook in my 
custom code snippets directory. But once you 
do that, you are good to go." 
-Michele Leroux Bustamante, chief architect, 
/Design, a San Jose-based .NET consultancy 

MEMBERSHIP SECURITY SYSTEM 

"Visual Studio 2005 auto- 
mates the process of manag- 
ing access and authentication 
in an application. Developers 
used to have to write this from 
scratch. Now you run the tool, 
and it generates a database, which authenti- 
cates with Active Directory or SQL Server. Your 
average developer isn't a security expert, so 
this is no small thing." 

-Patrick Hynds, president, Critica /Sites, a 
Nashua, NH.-based .NET consultancy 

COEXISTENCE WITH VS 2003 

"Visual Studio 2003 and 2005 coexist on the 
same machine very nicely. I didn't expect 
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that. Even though solution files have the 

same suffix, it doesn't screw up the machine. 

When you click on a file, it opens the correct 

one. That is no small thing." 

-Eric Sink, a principal at Champaign, lll.-based 

SourceGear, which sells source control tools 

for .NET developers 

CODE AND CORRECT 

"One of the things that has 
helped us is code and correct. 
It shows us where we are 
making mistakes, in much the 
same way Microsoft Word 
does, indicating what code 
you have to change." 

-Adam Calderon, principal engineer, Interknowl- 
ogy, a Carlsbad, Calif-based .NET consultancy 

BETTER INTELLISENSE 

"IntelliSense in Visual Studio 
2005 is smarter. It's really 
Btl r ^ accurate at figuring out the 
most likely thing you are try- 
ing to do. Trying to set a val- 
-ii i : jft ue for a property? It auto- 
matically pops that up right away. In Visual 
Studio 2003, you have to scroll down to a list 
of options." 

-Tim McCarthy, principal engineer, 
Interknowlogy 




.INGS THEY DON'T LOVE ABOUT VISUAL STUDIO 2005 



None of the Microsoft developers we talked to registered major complaints 
about the 2005 update to the IDE. But here's what they said when asked 
about any glitches or disappointments they have encountered along the way 




SLOWER THAN 2003 

"Microsoft has added all 
these features to Visual Stu- 
dio 2005, which makes it 
slower to bring up projects 
than 2003. I notice the lag 
when I have 20 to 30 files 
open, and also when I have to do a full 
rebuild. I compared the two, and Visual Stu- 
dio 2003 is a good five to eight seconds 
faster." 

-John Morales, senior. NET consultant, Thy cot ic 
Software, a Vienna, Va.- based consultancy 

A GLITCH IN ASP.NET 

"Initially, there was some confusion for 
ASP.NET developers in migrating Web projects 
to Visual Studio 2005. ASPX pages created 
under .NET 1.1 did not compile under 2.0. But 
Microsoft was guick to address the problem." 
-Tim McCarthy, principal engineer, Interknowl- 
ogy, a Carlsbad, Calif-based .NET consultancy 

NO REFACTORING FOR VB.NET 

"Microsoft dropped the ball 
by not providing refactoring 
support for VB.NET in Visual 
Studio 2005. The upgrade 
does support refactoring for 
C#. But it's not as fast as 





using JetBrains ReSharper in Visual Studio 
2003." 

-Jonathan Cogley, CEO, Thycotic Software 

NO CLASSES INSIDE CLASSES 

"We use Class Designer, the modeling tool in 
Visual Studio 2005, to keep the 
code and model in sync. It 
works well until you begin to 
I model more sophisticated 
things, such as showing classes 
L inside other classes. Then it 
breaks down a bit." 
-Bill Sheldon, principal engineer, Interknowlogy 

2003 SHORTCUTS 
DON'T WORK 

"Visual Studio 2005 is not backward compat- 
ible with the extensions I built in Visual Stu- 
dio 2003. These are shortcuts I wrote to 
address minor nuisances. They come in handy 
for things like modifying the columns of a SQL 
statement. It's a small guirk, really. To be fair, 
Visual Studio 2005 is easier to extend than 
2003." 

-John Morales 



Team System Adoption Lags Visual Studio 2005 



< continued from page 1 

ted to the former. 

"We already have tools that 
are tried and true." What's 
more, Team System appears to 
require a lot of customization, 
he said. "It's very broad and 
general." 

That makes it feel foreign to 
many Microsoft developers, 
accustomed to installing the 
company's tools and putting 
them to work right away, said 
Rauschenberger. "Team System 
isn't a great out-of-the-box 
experience," he said. "You have 
to take your process and match 
it to the tool. There's a lot of 
planning." That's not the fault 
of the product, per se, he 
explained. "It's the nature of the 
problem it solves." 

Microsoft delivered the pro- 
fessional, standard and express 
editions of Visual Studio 2005 in 
November 2005, launching 
SQL Server 2005, the first 
update to its enterprise data- 
base since 2000, at the same 



time. Team Architect, Team 
Developer and Team Tester also 
made the November debut. But 
Microsoft didn't deliver Team 
Foundation Server, on which 
the role-based editions depend, 
until March 2006. 

While the other Visual Stu- 
dio 2005 editions are essentially 
updates to Visual Studio 2003, 
Team System represents Micro- 
soft's first foray into the applica- 
tion life-cycle market. 

UPGRADE, COMPILE AND GO 

Microsoft developers may still 
be pondering the Team System 
decision, but the upgrade from 
Visual Studio 2003 to 2005 is 
happening largely without 
debate, most of the developers 
said. 

"In 99 percent of the cases, 
migrating is the way to go," said 
Bill Sheldon, a principal consul- 
tant at Interknowlogy, a Carls- 
bad, Calif., .NET professional 
services firm, which has moved 
all but one project to Visual 



Studio 2005. "It's based on 
SharePoint 2003, which still 
relies on the previous version of 
the .NET Framework, 1.1," he 
explained. 

While teams have encoun- 
tered some minor glitches along 
the way, for the most part, the 
migrations have proceeded 
smoothly. "We upgraded, com- 
piled and ran [our earlier .NET 
projects] without a change in 
behavior," said Rauschenberger. 

In fact, the move to 2005 has 
taken place more rapidly than 
with previous Visual Studio 
upgrades, noted Patrick Hynds, 
a Microsoft regional director 
and president of Nashua, N.H.- 
based .NET consultancy Criti- 
calSites. SQL Server 2005 has 
driven Visual Studio 2005 adop- 
tion, he said. "It lets developers 
write stored procedures in C# 
and VB.NET for the first time." 

Visual Studio 2005 includes a 
host of new productivity fea- 
tures. "But apart from SQL 
Server integration, it feels large- 



ly like a point release, a nice 
upgrade," said Rauschenberger. 

PIECEMEAL APPROACH 

Reservations aside, developers 
aren't ignoring Team System. 
They are working with some of 
its tools, but not necessarily 
adopting them in the teamlike 
way Microsoft has envisioned. 

For instance, consultant 
Billy Hollis uses Class Design- 
er, a modeling tool included in 
Team Architect, to create the 
initial set of classes and entities 
for an application. He relies on 
Class Designer to generate 
code. But since he alone uses 
it, he sees no need to take 
advantage of its ability to keep 
the code and model in sync. "I 
am an object-oriented archi- 
tect. But the routine developer 
doesn't necessarily need Class 
Designer." 

Hollis also adopted Team 
Foundation Server, as a "long 
overdue" replacement to 
Microsoft's previous-generation 



source control tool SourceSafe, 
he said. But he is not convinced 
Team System can deliver com- 
pelling enough benefits for his 
clients, who manage develop- 
ment teams of eight to 10 mem- 
bers. "Simplicity is a major con- 
cern. There is a perception that 
Team System is a lot of effort to 
set up for that size range," he 
said. "The larger you get, the 
more Team System helps." 

And the more the invest- 
ment makes sense, added 
Rauschenberger. It begins to 
pay off for teams of about 15 
analysts, developers and testers, 
he said. 

Thycotic's Cogley has no 
plans to adopt Team System for 
now. In fact, he doesn't buy into 
the approach. His team uses 
open-source tools, such as Sub- 
version for source control, and 
NUnit for testing. They aren't 
integrated with Visual Studio, 
but "we don't expect the inter- 
play," he said. 

"Visual Studio is a great 
IDE," he added. But, in Cog- 
ley's view, Microsoft should 
focus on the core and leave the 
bells and whistles to others. I 
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Marvell Makes S600M Bet on Intel's XScale Chips 

Hopes to make app and communication processor business profitable 



BY EDWARD J. CORREIA 

After six years of solid deficit, Intel's 
XScale business can hardly be 
considered a marvel. But it likely 
will become a Marvell. 

The application and commu- 
nications processor slice of Intel's 
XScale business has been sinking 
under heavy losses every year, 
despite high-volume design wins, 
such as the Motorola Q, Palm Treo 
and RIM BlackBerry 

Yet silicon giant Marvell Tech- 
nology Group is confident that it 
can right that ship. The company inked a 
deal with Intel in late June to allow it to 
purchase that portion of Intel's XScale 
business for US$600 million, mostly in 
cash, plus additional undisclosed 
XScale-related liabilities. Up to $100 
million of the payment can be in Marvell 
common stock, at Intel's option. Marvell 
also will take on about 1,400 Intel 
employees. The transaction is expected 
to close by November. 

During an investor's conference call, 
Marvell CTO George Hervey explained 
the purchase of an unprofitable business: 
"XScale currently generates $100 million 
in revenues per quarter for Intel. As we 
realize the potential of these products, 
we expect the quarterly revenue to 
increase and product cost to reduce." 

Marvell, which produces chips that 
power many of today's networking, com- 
munications and storage devices, said it 
will make the XScale business profitable 
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Marvell Technology Group will be picking up the chips that power such devices as the (from left) Sprint 
PPC-6700, Dreameo PVP V, RIM BlackBerry, J0B0 Giga Vu Pro and Palm Treo. 



by improving the performance and effi- 
ciency of chip manufacturing. "In the 
long term, we will move to advanced 
technologies, 65nm [nanometers], 45nm 
and beyond," said Marvell president and 
CEO Sahat Sutardja on the call announc- 
ing the deal. Most XScale chips are cur- 
rently produced at 130nm silicon, he 
noted. "Now with Intel's [technologies] 
available for our development, we will be 
able to offer a complete line of processors 
for our customers," he added. 

Intel's XScale business also was slow 
to profit because of volume constraints, 
Hervey said. "That business is on a sig- 
nificant growth path, but had [limited] 
capacity in its current environment," he 
said. "We see volume being a large com- 
ponent of improving financial perfor- 
mance. Also, we are immediately going 
to be effecting cost reductions [by] con- 
tinuing to work with Intel." 

Under the agreement, Intel will con- 



OMG Adopts SysML; Tools Are Out 



BY DAVID RUBINSTEIN 

SysML, the systems modeling language 
created for specifying, designing and ver- 
ifying complex systems, was adopted last 
month by industry consortium Object 
Management Group as an approved 
industry specification. 

And already, at least two companies 
have announced support for the specifi- 
cation in product releases. 

OMG collaborated with the Interna- 
tional Council on Systems Engineering 
(ICOSE) to write SysML, which, as a sub- 
set of the Unified Modeling Language 
(UML) 2.0, enables systems engineers to 
use diagrams to create graphical repre- 
sentations of system requirements, behav- 
ior and structure. SysML leverages 
OMG's Model Driven Architecture 
framework as well as the XML Metadata 
Interchange specification to exchange 
modeling data between tools. SysML also 
is expected to be compatible with the still- 
developing ISO systems engineering data 
interchange standard, 10303-233. (For a 
more complete explanation of the capabil- 
ities of SysML, see "SysML Effort About 



to Bear Fruit," by specification architect 
Alan Moore in the May 1 issue, page 15.) 

With the spec now complete, a Tempe, 
Ariz. -based company called Embedded- 
Plus Engineering has released two add- 
ins for the Eclipse-based IBM Rational 
Software Development Platform that sup- 
port SysML 1.0. A SysML Toolkit enables 
both systems and software engineers to 
create and access models, easing collabo- 
ration. A Simulation Toolkit lets both 
SysML and UML simulation models be 
executed so requirements can be verified 
and errors and can be detected early on in 
the development life cycle, according to a 
company news release. 

Also, Artisan Software, which helped 
lead the effort to create SysML, is 
including extensive SysML support in its 
Studio 6.1, which the company expected 
to begin shipping toward the middle of 
July. "Artisan firmly believes that stan- 
dards are fundamental to the sustainabil- 
ity and continuing evolution of the 
embedded systems design industry," said 
Artisan president and CEO Jeremy 
Goulding in a statement. I 



tinue to manufacture its application and 
communications processors while Marvell 
transitions the process to its own foundry 
partners. "Given that profile, in about one 
year we should be in a strong position to 
be accretive," Hervey said. "The design 
wins are there; the customers are there. 
It's now a matter of ramping production to 
those levels," he added. 

The addition of Intel's application 
and communications processors, added 
Hervey, "provides a good value for Mar- 
vell and our shareholders and we imme- 
diately become a major supplier to the 
cell phone market," as well as markets 
for electronic organizers, VoIP phones 



and personal media players. Hervey 

claimed that as of June 2006, sales 

of such devices were on pace to 

reach an annual level of 1 billion 

units. 

Intel will continue to manufac- 
ture and market its XScale proces- 
sors for networking and storage 
devices, and of course continue its PC 
and server processors. 

Intel also has increased its focus on 
wireless technologies, as evidenced by 
the recent investment by Intel Capital 
of $600 million in Clearwire, a wireless 
ISP (Motorola invested an additional 
$300 million). "From our perspective it's 
all about making choices," said Robert 
Manetta, an Intel spokesperson. "And 
we're doubling down on WiMax," he 
said, referring to an emerging wireless 
technology for computing and telephony 
akin to WiFi, but with far greater range. 
"We didn't feel the cell phone business 
was a good choice for us. To be more 
focused and efficient, you have to decide 
which technologies to be working on and 
which ones not to be." 

Intel plans to add WiMax to its Cen- 
trino mobile processor by the end of 
2007. I 
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Untangling 
jhe Complexity 

With Java EE 5, simplicity is the main 
reason for making the move up 



BY LARRY O'BRIEN 



Simplicity is a virtue in soft- 
ware, perhaps exceeded only 
by reliability Java Enterprise 
Edition 5 dramatically im- 
proves the ease with which 
teams can develop reliable, highly scal- 
able systems. 

While earlier versions of Java EE had 
achieved reliability, the complexity of 
Enterprise JavaBeans, central to the 
enterprise platform, has been a source 
of criticism from the first release. Java 
EE 5, building on language capabilities 
introduced in Java 5 SE, makes it much 
easier to control the metadata by which 
a Java EE application server does the 
heavy lifting on scaling, transacting 
and managing crucial 
within an application. 
Teams using the 
.NET Framework for 
enterprise develop- 
ment will particularly 
envy Java EE's more 
advanced object- rela- 
tional mapping capa- 
bilities. 

The increased sim- 
plicity makes it un- 
questionably appeal- 
ing for development 
teams implementing 
new enterprise sys- 
tems. Even teams evolving existing 
systems and experienced with previous 
versions will almost certainly find the 
new ease of use compelling enough to 
warrant an upgrade. The big question, 
however, is: Will the ease of use be 
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the .NET world. 



enough so that the capabilities are 
used in the sparing manner that 
suits them, or will people continue to 
make the crippling mistake of making 
every class an Enterprise JavaBean 
and every method call a heavyweight 
transaction? 

That decreased usage is both a goal 
and a result of increasing simplicity 
may seem paradoxical, but one of the 
clear lessons of earlier versions of the 
Enterprise platform was that the learn- 
ing curve so filled the heads of develop- 
ers, they failed to understand that "the 
new stuff should be applied in only a 
few places and that large portions (per- 
haps the majority) of the system should 
be written using Plain Old Java Objects 
(POJO) and standard 
object-oriented pro- 
gramming and design. 
The vendor com- 
munity has embraced 
Java EE 5 far more 
quickly than its prede- 
cessor, J2EE 1.4. At 
the time of writing, 
the only complete 
Java EE 5 application 
server is that devel- 
oped by Project Glass- 
Fish — available as an 



open-source version 
called GlassFish and as Sun Microsys- 
tems' commercially supported version, 
the Sun Java System Application Server 
Platform Edition 9. GlassFish uses the 
Common Development and Distribu- 
tion License, which, while free, is 



incompatible with the GNU General 
Public License. As previously reported 
in SD Times ("Java EE 5 App Server 
Race Begins," May 15, page 1), IBM 
will be delivering Java EE 5 capabilities 
"over the next 12 months." JBoss, which 
is already providing certain compo- 
nents, promises to finalize support 
"toward the end of the summer," and 
BEA "should be ready by the end of 
2006." 

WHAT'S NEW 

Java EE 5 goes beyond previous incar- 
nations primarily in three areas: the 
previously mentioned improvements in 
EJB functionality, JavaServer Faces 
and improvements in XML-based Web 
services. 

Enterprise JavaBeans have, from 
the first, scaled very well. This scaling 
has been achieved by recognizing that 
certain concerns can be addressed 
without domain-specific logic. Such 
concerns are captured in different fla- 
vors of Enterprise Bean — session, enti- 
ty and message-driven. Scaling such 
classes necessarily led to certain alter- 
ations in behavior, restrictions and life 
cycles; the app server handles much of 
the resulting work, but programmers 
need to know and follow the rules. In 
previous versions, the work of config- 
uring Enterprise Beans and instantiat- 
ing them was complex enough to 
require specialized training. The result 
was a world where, according to Sun's 
Ted Schuh, only 15 percent to 20 per- 
cent of Java developers were using the 




platform's enterprise 
bilities. 

Enterprise JavaBeans 3, the 
version in Java EE 5, still has the 
same underlying lifestyle com- 
plexities, but a large majority of ' 
configuration and boilerplate code 
has been eliminated. EJB 3 uses class 
and method annotations such as 
©Stateless and @PostActivate to sig- 
nal the same sorts of dependencies 
and callbacks that previously would be 
done via inheritance and polymor- 
phism. Separate home and object 
interfaces are no longer required (a 
particularly ugly kludge), and JNDI 
lookups are no longer necessary. 

For persistent Enterprise Java- 
Beans, the changes in EJB 3 are not 
as solely focused on easing use. 
Although container-managed persis- 
tence does have improved usability, 
the Java Persistence API goes deeper 
into the actual implementation than 
do the changes for session beans. The 
Persistence API is an abstraction on 
top of JDBC and implements an 
object-relational mapping. The 
"object-relational impedance mis- 
match" has been the subject of end- 
less discussions and design sessions; 
the object-oriented view of the world 
and the relational view of the world 
are not trivially mapped to each other 
(to keep things interesting, XML pro- 
vides yet another view). In object-ori- 
ented programming, common fea- 
tures are inherited and the runtime 
structure of objects is largely prede- 
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termined. In the relational model, the 
ideal is for all common features to be 
held in separate tables, and more 
dynamic relationships and runtime 
structures are common. In XML, the 
natural structure is a tree-like hierar- 
chy, and while dynamic runtime struc- 
tures and relationships are possible, 
they generally require significant pro- 
grammatic "stitching together." 

As with memory management, 
though, it turns out that a pragmatic 
model is often "good enough" to 
achieve high productivity with little 
pain. In recent years, the Java world 
has seen the Hibernate solution 
for O/R mapping evolve very 
successfully. The success of 
Hibernate deeply influenced 
the Persistence API, which is 
usable in the Standard edition 
of the platform as well as Java 
EE. This is an area in which 
Java is significantly ahead 
of the .NET world, 
where Language-Inte- 
grated Query (LINQ) 
is intended to bridge 
the object-relational- 
XML divides. LINQ is 
available only in pre- 
view form and re- 
quires modification of 
the underlying lan- 
;uage, something that 
is easier to achieve 
within the Microsoft 
tools division than in 
the more diverse Java 
community. (Hiber- 
nate Core 2.1 has 
been ported to .NET's 
Common Language Run- 
time and is available as 
NHibernate, but open-source 
software, or OSS, projects tend to 
evolve more slowly in the .NET world.) 
This is an important area of software 
development where the Java community 
has a significant productivity advantage. 

SUBSTANTIAL SERVICES STACK 

Java EE 5 also provides a more sub- 
stantial Web services stack in the form 
of JAX-WS. Again, annotations 
(@WebService) are used to significant- 
ly ease a previously cumbersome task. 
Databindings, another area of previous 
clumsiness, are now delegated to 
JAXB, allowing the claim that "services 
based on JAX-WS [may] use 100% of 
XML Schema," according to the docu- 
mentation. The intersection of schema, 
Web services and different stacks (for 
example, .NET) has long been the 
sticking point for interoperability, and 
it seems a little naive to believe that 
this can all be cleared up in a single 
stroke. JAX-WS also allows applica- 
tions to use the REST architecture, 



JSF, more than 

some other 

components, 

seems to be 

a clear 

winner. 



another example of supporting lighter- 
weight approaches. 

Another OSS -inspired addition to the 
EE platform is interceptors. A few years 
ago, aspect-oriented programming was 
predicted by many (including me) to be 
The Next Big Thing in software design. 
Although it has fallen well short of 
sweeping the industry, AOP is a very 
worthwhile technology. Essentially, AOP 
allows one to treat function calls and 
returns as if they were events — one can 
introduce behavior or modify the 
input/output values. 

Java EE's interceptors fall consid- 
erably short of the 
AOP ideal, which calls 
for universal injection 
without modification 
of the intercepted 
code. In Java EE, 
the application of an 
interceptor requires 
either an annotation 
on the intercepted 
code or falling back to 
editing deployment 
descriptors. However, 
those familiar with 
JBoss (much less AspectJ) can attest to 
the utility of interceptors for functions 
such as logging (even though logging is 
now part of the core, aspects/intercep- 
tors allow the logic of logging to be more 
decoupled from the business logic). 

Although the crucial part of an 
enterprise platform is the back end, 
one should not dismiss the work that 
goes into the front end, either. Java 
ServerFaces (JSF) is a server-side com- 
ponent framework for delivering Web 
UIs. It provides a good separation of 
behavior and presentation and is 
designed to "play well" with automated 
tools (i.e., interface designers). JSF is 
yet another Enterprise platform com- 
ponent whose origins and influence 
can be traced to a successful OSS 
library — in this case, Struts. 

Craig McClanahan, creator of 
Struts, participated in the development 
of JSF, and it, more than some other 
components, seems to be a clear win- 
ner. The Page Controller Pattern of 
JSF is more flexible than the pattern 
used in Struts and is, I think, no more 
difficult to understand. Navigation and 
extensibility are other areas where JSF 
seems to have an edge on Struts. 

Obviously, Sun is primarily interest- 
ed in talking about the current release 
and forthcoming vendor support, but 
Schuh was willing to speculate about 
what the future might hold for Java 
EE. Ease of development, the main 
theme of Java EE 5, could well contin- 
ue to be a focus, but Schuh noted that 
improved management of running sys- 
tems is something that could benefit 
from more attention. 



Another area in which Sun sees a lot 
of evolution is the interaction of Java 
with dynamic and scripting languages: 
first, incorporating the experiences and 
lessons learned from people working 
with dynamic languages; second, inter- 
operating with them; and third, consid- 
ering (considering) changes in the VM 
to better support them. 

JAVA EE AND THE ECOSYSTEM 

Java EE 5 has several technologies that 
are reactions to successful lightweight 
OSS libraries and tools. It's nice to see 
the lessons of Hibernate, Spring and 
Struts incorporated in 
the Enterprise plat- 
form, but none of 
these projects has 
ceased advancing in its 
own right, and its nat- 
ural to wonder why 
one would choose to 
place one's faith in EE 
when the inspirations 
for this version are 
continuing their own 
(still smart, still worth- 
while) evolutions. I 
think there are three considerations to 
develop the answer: innovation, integra- 
tion and capacity. 

Those teams that are pushing the 
leading edge of techniques and tools 
and desire the most innovation (per- 
haps because of their functional 
requirements or, equally valid, simply 
because they have climbed the learn- 
ing curve of the various OSS frame- 
works) will have less to gain than teams 
with relatively straightforward needs 
and less experience. Somewhat para- 
doxically, the new platform (Java EE 5) 
is the better choice for the more con- 
servative team. 

The paradox is solved when one 
considers integration. One can look to 
a Java EE 5 solution as pretty much a 
one-stop shop for the essential services 
of a large-scale application. While you 
may not get 100 percent of the tools, 
libraries and best-practice facilitators, 
you will get a subset that is more than 
capable of being the basis for a well- 
architected, highly scalable, highly 
available solution. To be sure, enter- 
prise development is not easy, integra- 
tion and ease-of-use is no guarantee of 
success, and ignorance cannot be a 
strategy. But for many teams, dealing 
with disparate libraries and tools, each 
evolving at its own pace and buzzing 
about different aspects, can be dis- 
tinctly counterproductive. An integrat- 
ed platform could help such a team sig- 
nificantly. 

My feeling is that Java EE 5 pro- 
vides a better first chance at producing 
a highly scalable system than disparate 
► continued on page 32 
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Simplicity the Main Attraction for Java EE 5 



< continued from page 31 

lightweight frameworks. This 
is not to say that there are not 
many success stories using the 
lightweight frameworks. I can 
only say that my experience 
with the scalability of properly 



architected and implemented 
J2EE systems has been 
extremely positive. 

Container-managed persis- 
tence and stateless session 
beans do work. I recently was 
contacted by a former client 



whose J2EE back-end services 
had grown from supplying two 
clients when I had last talked 
to them to 800 clients — with- 
out modifying the architec- 
ture. The large majority of 
their effort in the past few 



years has been developing 
superior management con- 
soles, not changing a system 
that has scaled with very little 
effort. 

It would be petty to qualify 
that kind of success with, "Well, 
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yeah, but aren't the deployment 
descriptors kind of ugly?" I 
have no doubt that the talented 
developers at that company 
could have achieved success 
with a lightweight framework, 
too, but they certainly don't 
regret their license fees. 

TO ADOPT OR NOT 

So, should a development 
team move to Java EE 5 or 
not? Prior versions of the 
Enterprise platform have been 
criticized as overly complex 
and introducing as much risk 
(in the form of uncertainties 
about expertise, configuration 
complexities and vendor sup- 
port) as they reduced via their 
highly scalable technologies. 
With widespread promises of 
vendor support and a focus on 
increasing the ease of develop- 
ment, Java EE 5 seems to be 
the first version of the Enter- 
prise platform that has a sig- 
nificant chance of shedding 
this reputation. 

I quite like Java EE 5 and 
expect to recommend it for 
many clients. On the other hand, 
fellow SD Times columnist Allen 
Holub, long a critic of both the 
complexity and implementation 
of the Enterprise platform, says 
that things would be better if 
"the entire middle layer of exist- 
ing JEE stuff [were] replaced 
with a clean, direct implementa- 
tion of the new APIs." 

Certainly, teams actively 
evolving existing EE applica- 
tions will profit from the 
improvements in usability: 
maintaining a Java EE 5 appli- 
cation should be cheaper and 
faster than doing so in J2EE. 
Those who are just beginning 
or have tangential interests in 
the world of enterprise Java 
development would do well to 
study Java EE 5 for its unifica- 
tion of much of the best 
advances in the field. Others, 
depending on their tolerance 
(or embrace) of the higher risk 
and higher reward potential of 
using the latest versions of pub- 
licly evolving OSS solutions, 
may conclude that the latest 
version of the Java EE plat- 
form, while outwardly changed, 
does not go far enough. I 

Independent software architect 
Larry O'Brien is a contributing 
editor to SD Times, and is 
the former editor-in-chief of 
CMP's Software Development 
magazine. 



Innovations by InterSystems 



You program in Java, 
but still use a relational database, 



Back end: 
Relational database 



Front end: 
Object-oriented programming 




There's something wrong with this picture. 

Unlike relational databases, Cache is a perfect match as the back end for object- 
oriented programming. It's the world's fastest object database, and runs SQL queries 
up to 5 times faster than relational databases. Plus, with an innovation by InterSystems 
called Jalapeno™, Cache persists Java objects without relational mapping - reducing 
development time for Java programmers by as much as 40%. 

Cache delivers massive scalability on minimal hardware, requires little administration, 
and incorporates a rapid Web application development environment. It's available for 
Unix, Linux, Windows, Mac OS X, and OpenVMS - and is deployed on more than 
100,000 systems ranging from two to over 50,000 users. 

We are InterSystems, a global software company with a 28-year track record of 
innovations that enrich applications. 



InterSystems ^ 

CACHE 



Try an innovative database for free: Download a fully functional, non-expiring copy of Cache, or request it on CD, at www.InterSystems.com/Cache21JJ 



* Read about our money-back guarantee at the web page shown above. 
© 2006 InterSystems Corporation. All rights reserved. InterSystems Cache is a registered trademark of InterSystems ( oiporanon. 7-06 CacheInno21SDTi 
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EDITORIALS 

A Broken Patent System 

Patent law, at least as it applies to software, is broken. There is a differ- 
ence between patent law and copyright law, the type of issue that SCO 
is suing everyone over. Copyright law involves the protection of a specific 
product or creation, and regulates who can copy or reproduce it. Mickey 
Mouse is copyrighted. Britney Spears' latest song is copyrighted. Source 
code can be copyrighted. Beethoven's 9th Symphony is not copyrighted, 
but a modern musician's specific arrangement of it might be copyrighted. 
Copyright law is reasonably clear, and generally well understood. 

By contrast, patent law is baffling and complex. Patents are applied to 
inventions — that is, a unique method of doing something. A patent must 
be new, practical, but non-obvious. A patent must be explicitly applied for 
by the inventor, and the patent must clearly explain exactly how the inven- 
tion works. During a fixed period of time, the inventor has exclusive rights 
to use or license the patented invention; after that period of time, anyone 
can use it. 

When the patent system works properly, inventors can prosper, 
investors can profit, and technology can advance. When the patent sys- 
tem works improperly — as with software patents — everyone lives in a 
world of uncertainty, because you never know when someone will claim 
that you've violated a poorly defined, poorly documented, poorly 
researched patent, and thus you either have to pay a tremendous licens- 
ing fee, stop distributing your product or fight it out in court. 

One challenge with software patents is determining whether the 
alleged invention actually is new or not. This is at the crux of the lawsuit 
filed by FireStar Software against Red Hat, regarding a method for map- 
ping objects to a database. FireStar believes that the patent, which it pur- 
chased, represents a genuine innovation. Others believe that prior art 
shows that the patented technique is not new at all, and thus the patent 
is invalid. The burden of proof is now on Red Hat to challenge the patent 
or show that it didn't infringe on it. 

We certainly don't know enough in this case to weigh in on either side; 
we don't know if the FireStar patent is valid or if Red Hat violated it. 
However, the infrastructure for granting and challenging software 
patents is terrible. Given the pace of innovation, the U.S. government 
must find better and faster ways to search prior art, to issue or reject 
patents and to resolve patent issues. Cases like this, no matter their out- 
come, have a chilling effect on our industry — and everyone loses. 

And Then There Were Three 

In a bolt from the (Big) Blue, Linux has gone corporate. The introduction 
of Lotus Notes on Linux 7.0.1 brings the enterprise collaboration envi- 
ronment to a place that since 1989 has been the exclusive domain of oper- 
ating systems from Microsoft and Apple (unless you count IBM's OS/2). 

This represents a major milestone for Linux on the desktop, not for 
Notes e-mail, calendaring and other productivity apps — better imple- 
mentations of those apps can be found elsewhere. 

What Lotus Notes brings to the Linux desktop is a mature, secure col- 
laboration system with replication, and the ability to create and execute 
custom applications across Linux, Mac OS X and Windows from a single 
codebase. Those things were unavailable before in single solution, and 
their absence kept Linux out of many enterprises as a result. Because for 
Notes shops — IBM claims there are 125 million users — the lack of a 
Notes client was a deal killer for Linux. 

Suddenly Linux is a viable choice for the corporate desktop. Initially 
an Eclipse plug-in for Red Hat Linux (with SUSE to follow), Notes ulti- 
mately will be a full RCP implementation for all three platforms. IBM 
says it should be in beta by the fall. That will add development capabili- 
ties for Linux workstations and support for the OASIS Open Document 
format. The availability of Lotus Notes on Linux is a huge step toward 
turning desktop Linux from an undocumented worker into a legitimate 
corporate citizen. I 




.NET 3.0 Bring 
The 3D Internet to Life? 



Just because your laptop or desktop 
screen is flat, that doesn't mean 
that the graphics and the experience 
have to be flat too — particularly the 3D 
Internet. 

Over the past decade, there have 
been attempts to bring the 3D Internet 
to life, but it just hasn't come to fruition. 
Despite a valiant effort, standards like 
VRML (Virtual Reality Markup Lan- 
guage, which appeared in the late 1990s) 
never really established a foothold. This 
may have been due to limited bandwidth 
in Internet connections or inadequate 
hardware support. But this is about to 
change. 



to be the case. Microsoft indicates it is 
beginning to see high levels of interest 
from consumer goods manufacturers 
and retailers that want to provide 
the ultimate experience to their cus- 
tomers from their Web site. In the near 
future, we may see Web sites split in 
half — portions of the Web site will be 
in traditional Web technology and oth- 
er portions will provide a richer 3D 
experience for users of Windows XP 
and Vista. 



Ron DeSerranno 



WINFX REBRANDED 

Microsoft has had a slew of 
new product releases in the 
past year. SQL Server, Visual 
Studio 2005 and the release 
of Windows Vista Beta stole 
much of the limelight, but 
lost in the fray was a new 
generation of communication 
and graphics technologies 
known as WinFX, recently rebranded 
to .NET 3.0. Its graphics capabilities 
are tremendous. It's vector-based with 
hardware acceleration, ink-enabled, 
and has 2D and 3D animation, UI con- 
trols and fixed and flow format docu- 
ment type capabilities. .NET 3.0 has 
the potential to challenge PDF, Flash 
and even HTML on the Web. 

.NET 3.0 comes with its own 
markup language called XAML (Exten- 
sible Application Markup Language), 
which allows for graphics and controls 
styling. XAML also supports data bind- 
ing to external ADO.NET and Web 
services. 3D objects can be animated 
and have video played on them. The 
2D and 3D graphics and animation 
capabilities in .NET 3.0 can author 
powerful front ends in .NET applica- 
tions or can be used through a Web 
browser in a new application called a 
Web application. Web applications are 
full-blown .NET apps running through 
a browser in a security sandbox, similar 
to a Java applet. 

In addition, XAML has some cross- 
platform 2D capabilities through the 
Microsoft initiative known as WPF/E 
(Windows Presentation Foundation/ 
Everywhere), which will eventually 
allow for XAML's use on the Macintosh 
and other operating systems. 3D, while 
usable in browsers such as AOL, Inter- 
net Explorer and Netscape, is explicit- 
ly for the Windows XP and Vista oper- 
ating systems. 

You might think that this limits 
XAML as a viable option for the main- 
stream Internet, but this doesn't seem 




REVOLUTIONIZING THE INTERNET 

While 3D functionality for such sectors 
as industrial controls, med- 
ical imaging, computer-aid- 
ed design and geographic 
information systems are 
obvious, I have often won- 
dered whether .NET 3.0 
could revolutionize the gen- 
eral Internet with its 3D 
capabilities. 

The answer came to me 
recently while I was leading 
a .NET 3.0 training course. 
One of the developers, who worked 
for a book retailer, asked me to take 
a look at the application she was work- 
ing on. 

She pulled up her browser and 
typed in an Internet URL. We were 
presented with a very attractive view 
of the store front. Then, we began to 
"fly" toward the store. The doors slid 
open and, once inside, we were posi- 
tioned in front of a bookshelf. 

We submitted a query into a stylish, 
semi-transparent user interface, and 
suddenly books began to appear on the 
shelf. With a click of the mouse, a 
selected book came off the shelf 
toward us, opened and presented 
pages for browsing. 

I almost choked on my bagel. 
Given how far we have pushed the 
Web and the Internet in the past 
decade, it is almost surprising that the 
Web hasn't evolved more on the 3D 
front. 

Sweeping adoption of new Web 
technologies usually requires a major 
player like the World Wide Web Con- 
sortium or Microsoft to give it a hefty 
push before it takes flight. With the 
widespread availability of broadband, 
the tremendous graphics power in 
today's video cards and an endorse- 
ment by Microsoft, the 3D Internet 
may be here! I 

Ron DeSerranno is the CEO of Mobi- 
form Software, which sells an XAML 
designer for .NET. He is also co-author 
of "Professional WinFX Beta" (Wiley, 
2005). 
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Letters to the Editor 



CHOICE INFORMATION 

David Rubinstein had an interesting 
column on blogs ["In Blogs We 
(Wrongly) Trust," June 15, page 34]. 

One thing about blogs... one must 
intelligently give weight to the 
source. There are incredibly qualified 
bloggers (like "Captain Ed" of 
captainsquartersblog.com, or the guys 
from Powerlineblog.com) that are seri- 
ous professionals. 

There are other bloggers that are 
wild-eyed lunatics that you ignore. You 
must use your brain and sift/filter out 
what is bad from the good. 

Also, when using Wikipedia, you 
keep in the back of your mind that any 
fact is suspect and don't take it as the 
last word. It usually is pretty right-on, 
and a good place to start looking. 

Given the choice between all this 
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Editors note: The following letter 
was written in response to an SD 
Times News on Thursday newsletter 
item dated July 13, which reported 
that Microsoft was again being fined 
by the European Union over anti- 
competitive practices: 

PROTECT U.S. 

This underscores the idea that 
Microsoft is a criminal organization, 
and continues to use its tremendous 
power to further its control over 
the operating-system market as well 
as to insinuate itself into many oth- 
er markets. 

I only wish that American courts 
were as determined to protect U.S. 
citizens from this abusive and unre- 
sponsive giant. 

Reed Fisher 



information, and the old days when "old 
media" was the only choice, I much pre- 
fer today's options. 
Timothy D. Rogstad 

NASA Jet Propulsion Lab 

I'm not much into blogging, but I read 
your column anyway and I have a few 
comments. 

One problem I have is your state- 
ment that folks like George Will and 
Walter Cronkite took years to develop 
their level of trust with the public. Years 
ago there weren't many alternate 
sources for the same information they 
were dispensing, and it would take years 
to determine the level of truth in their 
reporting. Fifty years ago, mass media 
consisted almost completely of the local 
newspaper and magazines like Time and 
U.S. News & World Report. We couldn't 
independently determine what bias, if 
any, there was in what news was report- 
ed, and how. 

Much of what is reported today on 
the evening news and in the print 
media would not have been news 50 
years ago, simply because there was 
nowhere to report it, at least in a time- 
ly manner. In my own interest of land 
speed record racing, one had to wait 
until Hot Rod Magazine ran its articles 
on the fall season at Bonneville, or 
laboriously check articles in the Read- 
ers' Guide at the library. Now I can go 
online and seek out whatever I want, 
and be assured of finding it. 

Any reader who uncritically assigns 
more credibility to a blogger than he is 
worthy of without checking alternate 
sources for the same information 
deserves to be fooled. 

Bloggers, just as their broadcast and 
print colleagues, are susceptible to 
making news stories out of cats that 
don't get stuck in trees. 

For example, I have checked out the 
Drudge Report enough times to know 



that too many of his cats are happily 
prancing around on the ground. 
Richard Coleman 

I found it interesting that you chose to 
worry about corrupt businessmen and 
corrupt government but were not con- 
cerned with the corrupt environmental 
movement that largely achieved its 
goals (we are now concerned about 
the environment; we've significantly 
cleaned up our air and water from the 
1970s) but now hypes tiny (or even 
non-) problems to raise money to keep 
themselves in business. 

I would suggest that the area that 
has the highest level of corruption is 
the union movement. However, the 
environmentalists and unions are 
strong Democrat supporters, so their 
corruption is glossed over in the media, 
including SD Times. Indeed, I would 
suggest, based on a few examples such 
as Jayson Blair, that the media is fully 
as corrupt as the business community, 
but that would not provide a bogeyman 
for leftists. 

George Hadley 

Normandy Park, Wash. 

I agree with all of your points on the 
blogosphere in your column of June 
15, but that raises a question for me: 
Rather than defend traditional publish- 
ing sites, why not extend your reach 
into the blogosphere? I feel that far too 
many traditional publishers are busy 
challenging the blogosphere, when it 
would be much easier for them to con- 
quer it. 

John Wall 

The M Show 

WHAT DO YOU THINK? 

SD Times welcomes feedback. Letters 
should include the writer's name, com- 
pany affiliation and contact informa- 
tion. Letters become the property of 
BZ Media and may be edited for space 
and style. Send your thoughts to 
feedback@bzmedia.com. 



Much Ado About AJAX 



While fewer than 1 in 5 enterprise developers currently use AJAX devel- 
opment methods, more than half of those polled in a recent survey said 
they have evaluated and will use them, are currently evaluating them, or 
plan to do so. 

That's according to the North American Development Survey 2006: 
Spring, published in May by Evans Data. 

Of the 399 respondents, only 6 percent said they have evaluated 
Asynchronous JavaScript and XML development and reject the technigue. 

AJAX is a method for developing interactive Web applications that ex- 
change smaller amounts of data with back-end systems than convention- 
al HTML technigues. Pages appear more responsive because they do not 
have to be entirely refreshed each time a change to page data is made. It 
was first introduced as AJAX in 2005; adoption has been broad and rapid. 
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'Good Enough'...But for Whom? 



"G 



ood enough" is the new black. Soft- 
ware development is a task that 
involves failing dozens or hundreds of 
times before achieving moderate success. 
Programmers necessarily have tempera- 
ments that respond to failure with deter- 
mination and defiance. That tempera- 
ment is not easily switched off, and all 
programs of more than trivial complexity 
fall short of the programmers imagina- 
tion. Further, part of the addiction of pro- 
gramming is that, as functions build and 
the systems grow in capabilities, refine- 
ments and improvements blossom in the 
programmer's mind. Have any of us 
worked on a system whose capabilities 
were fully tapped? I doubt it. 

Since at least the 1960s, management 
has struggled with the paradoxes of this 
temperament. On one hand, the engaged 
programmer is the one who produces 
work at 10 times the pace of the unen- 
gaged (the order of magnitude in produc- 
tivity difference is not a myth, but instead 
has been confirmed in multiple studies). 

On the other hand, the engaged pro- 
grammer can take a codebase and, after 
muttering "my precious-s-s-s-s" disap- 
pear. If ever found, the system may have 
new capabilities but be unrecognizable 
and unmaintainable. 

Those whose programming teeth 



were cut on fewer than 32 bits were uni- 
versally tempted to alter their code for 
performance reasons. In those prelapsar- 
ian days, it didn't take many loops to see 
the difference between an integer and a 
floating point operation or to gain head- 
room by using a tightly packed union in 
your data structures. 

Also, tasks of The Long Long Ago were 
more modest: I once spent six 
months writing a program to 
generate contour maps, a data 
visualization that is now a one- 
liner in Mathematica or Mat- 
Lab. And while there may be 
no silver bullet for software 
development, the compound- 
ing interest of incremental 
improvements has made us 
rich: It is the work of minutes to 
create an event-driven win- 
dowed form that plays well with others. 

There is little doubt that managed lan- 
guages are both more productive and suf- 
ficient for the majority of professional 
development tasks. Explicit memory 
management, long considered part and 
parcel of any nontrivial application, is now 
unnecessary in the large majority of tasks. 

The sea change is not that hard prob- 
lems can often be solved well enough by 
using tools and libraries, but that "good 




enough" has been embraced by a new 
generation of programmers as part of 
their temperament. 

As one of the old guard, I am of course 
tempted to lament this: A "good enough" 
mentality is a mentality of defects. The 
golden rule of real systems is that things 
go wrong. The golden rule of asynchro- 
nous systems has long been that not only 
do things go wrong, every- 
thing goes wrong, all the time, 
at the same time. When facing 
a typical Web project, those 
with a classic mentality start 
looking at failure modes and 
reliability. Those with a "good 
enough" mentality start hack- 
ing HTML, JavaScript and 
Web services. Often, they do 
better delivering value than us 
more cautious older fellows. 
To be sure, embracing "good enough" 
led to shaky technical foundations of many 
companies in the dot-com bubble. Too 
many systems were built with languages, 
databases and data structures that were 
incapable of scaling. Google succeeded 
not just because of a great algorithm, but 
because of a great understanding of the 
demands of Internet search. Other com- 
panies believed that a Web site that 
worked with a thousand users would nee- 



Larry 
Q'Brito 



essarily work with millions and eventually 
suffered the consequences of their hubris. 

The eagerness to optimize was an 
expression, appropriate to the era, of the 
enthusiastic, engaged psychology of good 
programmers. So, too, may be the eager- 
ness to begin assembly and get something 
"good enough" up and running. Agile, 
iterative development, which we know to 
be superior for controlling risk and deliv- 
ering value, explicitly embraces "You 
Ain't Gonna Need It" and "The Simplest 
Thing That Could Possibly Work." Sadly, 
though, it is sometimes impossible in the 
earliest stages to distinguish the com- 
mendable from the naive or lazy: those 
who think that the first iteration will be all 
there is to the task. This, of course, is nev- 
er the case — nor is it the ideal. 

The decision as to what constitutes 
"good enough" must be the choice of the 
client, not the developer. A minimally 
functional system can be a great thing for 
eliciting feedback and understanding 
requirements, but it is still the responsi- 
bility of the developer to remind the 
client of failure modes, scalability prob- 
lems and rough spots not visible in the 
main scenario. In my experience, educat- 
ed clients generally make good decisions, 
even in the face of nuanced trade-offs. 
That's good enough for me. I 

Larry O'Brien is a technology consul- 
tant, analyst and writer Read his hlog 
at www.knowing.net. 
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How Can Novell Recover? 



In June, Novell announced a belated 
move intended to counter a string of 
disappointing quarterly results: It 
removed Jack Messman from the CEO 
position and turned the job over to Ron 
Hovsepian. This move was universally 
praised, as Messman's vision for the 
company was still inarticulate after five 
years at the helm. And his biggest busi- 
ness move — integration with consulting 
firm Cambridge Technology Partners — 
was unwound last month, when the con- 
sulting services unit was sold off. The 
one important transition that occurred 
under Messman's watch — the acquisi- 
tion of S USE Linux and the formulation 
of a Linux orientation — was the work of 
Novell's then director of marketing, 
Chris Stone. The problem is that Stone 
is no longer with the company, and in 
his absence, no one at Novell has yet 
been able to implement a good long- 
term strategy. 

Hovsepian, an IBM veteran known 
for his ability to engage successfully with 
customers, will certainly provide a boost 
for the company's fortune, but for long- 
term success he needs a vision. An apt 
question is: What vision is left for Nov- 
ell? During the past 10 to 12 years, under 
four different CEOs (including Eric 
Schmidt, the current CEO at Google), 
the company came up with a series of 



-as we now 



feckless reorientations that it could not 
execute on. 

These moves included the co-devel- 
opment of UnixWare and the later 
acquisition of Unix. Despite Novell's 
hopes for a blend of Unix and NetWare, 
nothing materialized. Unix was sold off 
in a sale that was botched 
know from the dispute 
between Novell and The SCO 
Group regarding what prop- 
erty Novell actually did sell. 

Then there was Novell's 
passionate, short-term ro- 
mance of Java. The company 
bought Silverstream Software 
in 2002. After making several 
bold announcements regard- 
ing NetWare as the definitive 
platform for enterprise Java, it 
quietly abandoned the strategy. Then 
the now-abandoned acquisition of Cam- 
bridge Technology Partners. 

Finally, Novell hit upon the Linux 
strategy and bought two respected tech- 
nology firms: Simian and SUSE. Despite 
the latter's standing as a top Linux distro 
and a US$50 million infusion for SUSE 
from IBM, Novell has not been able to 
really expand its Linux strategy. 

All these moves have one thing in com- 
mon: They are attempts to extend Novell's 
highly regarded but little-used NetWare 



Integration Watch 




and Groupwise product lines. The moves 
are bound to failure because they are 
swimming upstream against a singular, 
unarguable fact: NetWare is doomed. Its 
user base is shrinking, and attempting to 
extend NetWare in the hopes that new 
customers might recognize what terrific 
technology it is goes against a fundamen- 
tal rule of software-market 
dynamics: Legacy products 
never return to dominance. All 
you can do is slow their 
decline. Minor successes can 
be realized by complete 
repackaging (as Borland did 
when it morphed Object Pas- 
cal into Delphi/Kylix), but 
these successes tend to be 
short-lived. 

To move forward, I believe, 
Novell has to abandon any strategy that 
is based on resurrecting NetWare and 
Groupwise. Undoubtedly, it should con- 
tinue supporting, even developing, the 
products, but it can no longer make 
them a centerpiece. In this respect, it is 
in a similar position to that of BE A in the 
mid-1990s. BEA had one main product: 
the legacy transaction manager, Tuxedo, 
which had an active but stagnant user 
base. BEA supported and revved Tuxe- 
do, but its larger strategy shifted to oth- 
er products. It bought up the Web Logic 



Java app server and the rest is history, as 
they say. (Today, it still sells and supports 
Tuxedo as a side line.) NetWare should 
be seen as a revenue stream that enables 
Novell to do other things, as should the 
more than $1 billion in cash the compa- 
ny has on hand. 

A good way to have spent that cash 
would have been to buy JBoss and rede- 
fine itself as the leading vendor of open- 
source application server stacks — an 
almost perfect fit with its historical role, 
but using updated technology. However, 
Red Hat closed off that approach. So, now 
Novell must work on making SUSE more 
relevant in other ways. SUSE enjoys some 
advantages over Red Hat: It is a better 
product overall, and it has much better 
relations with the open-source communi- 
ty than does Red Hat. Novell should 
adopt technologies that make SUSE even 
more compelling — for example, buying 
Xen to embed virtualization directly in its 
server product. Another sensible acquisi- 
tion would be Zend, the company behind 
PHP. This move could enable SUSE to 
become the preferred Linux version for 
running large Web sites. And so on. By 
committing entirely to Linux and acquir- 
ing the companies that can improve and 
distinguish its SUSE product, Novell can 
return to being the company for enter- 
prise infrastructure without ever again 
speaking the word "NetWare." I 

Andrew Binstock is the principal analyst 
at Pacific Data Works. 



There's No Avoiding Politics 



My esteemed colleague Larry O'Brien 
has opined that it's usually not a 
good idea for techies to talk about poli- 
tics, but I beg to differ. Politics affects all 
of us, both in our day-to-day lives and in 
our technical lives, and as such it 
behooves us to talk about it in technical 
circles. Programmers who pretend to be 
beyond the fray are really ostriches with 
their heads in the sand. I'm planning on 
ruminating about politics in this column, 
so if you agree with O'Brien, you may 
want to skip over to Windows & .NET 
Watch. I'm sure that many of you will dis- 
agree with me, but that's fine. The dis- 
cussion is, itself, valuable. 

Two news stories brought my rumina- 
tions to the fore. The first was Bill Gates' 
move into full-time philanthropy. 

A reader wrote that it was somehow 
wrong-headed for a wealthy individual to 
step into what the reader saw as the 
purview of government. I strongly believe 
that if a governmental solution to a real 
problem isn't happening, then it's the 
responsibility of the rest of us to solve the 
problem in spite of the government. A 
democracy is a means for individuals to 
band together to solve problems that 
can't be addressed by a single person. I 
see nothing wrong with an individual who 
has the resources to solve a real problem 



stepping up to the plate and providing 
the solution. 

In fact, saying that certain classes of 
problems are a purview only of govern- 
ment is a shirking of our individual 
responsibility. Frankly, I deeply respect 
and admire what Gates has done here, and 
wish that others who have became wealthy 
in our industry would join him. 

The second story is more 
troubling. 

Last month AT&T an- 
nounced that it has no inten- 
tion of upholding its cus- 
tomers' privacy rights should 
the government come a-court- 
ing. Not only will it release 
your name, address and other 
information, but it will give up 
all your passwords, track all | 
your clicks and keystrokes (at least on 
Yahoo sites), pass on your e-mail, and give 
up pretty much any information that flows 
across its wires or through its machines. I 
find AT&T's policy dubious at best. 

AT&T's stated policy just clarifies 
something that we all should consider 
whenever we write a public-facing appli- 
cation: The Internet is not safe when it 
comes to information transmittal. Here, 
the hacker effectively owns the infrastruc- 
ture. There's little practical difference 



between a hacker staging a man-in-the- 
middle attack and a service provider 
doing the same thing. 

The free market solution to this prob- 
lem is to take your business elsewhere, 
but if you haven't noticed, AT&T is very 
close to re-establishing the monopoly that 
it held back in the 1970s, when it was bro- 
ken up by the antitrust folks. 

In the San Francisco area, 
where I live, it's pretty much 
the only game in town if you 
need a high-speed push. (If 
you're just pulling, you can use 
so-called broadband service 
provided by the local cable 
company.) Even the third-par- 
lyTtt-Jjl ty D S L providers (one of which 
! t j firfK I use) lease their wires from 
ilUJLW AT&T, which is to say that the 
traffic that goes across those wires goes 
through AT&T computers, and is subject 
to AT&T policies. 

Even if you can avoid AT&T at the 
carrier level, you'll also have to avoid all 
online stores that are based at Yahoo, 
because all activity at those stores is sub- 
ject to monitoring at the click- and-key- 
stroke level. I'm sure the owners of those 
stores will be upset if they lose business 
as a consequence, but truth to tell, most 
people won't understand these issues, 




and they'll assume their transactions are 
private, even when they aren't. 

Which brings us to the technical side 
of this issue. Our customers expect a level 
of privacy that we're bound to provide to 
keep their custom. Even if we come down 
on the government-needs-this-informa- 
tion side of the equation, we can't permit 
sensitive information like customer buy- 
ing habits to be freely available to just any- 
one, because our customers won't like it. 
AT&T's policies really just force us to do 
something that we should be doing any- 
way: building secure sites that are simply 
not accessible to snoops. 

Returning to politics, I majored in 
school in both computer science and his- 
tory, and the historian in me is troubled by 
the notion that AT&T says motivates its 
privacy policy: that national security con- 
cerns override privacy concerns. I believe 
that if our reaction to terrorism is to cre- 
ate a secret police that spies on our own 
citizens, then the terrorists have won. As 
programmers, we can come down either 
for or against this monitoring, but we can't 
be neutral, because our day-to-day work 
exposes our point of view. Either we build 
sites that are monitorable, or we don't. 
There's no in between. So, here's politics 
right in the middle of our code, so to 
speak. There's no avoiding it. I 

Allen Holub is an architect, consultant 
and instructor in C/C++, Java and OO 
Design. Reach him at www.holub.com. 
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ALMs for the Tools 



Industry Watch 







Any day now, we could be hearing an 
announcement from Borland that a 
buyer has come forward to fund a spin-off 
of the developer tools group. The compa- 
ny then will use the money it receives in 
the deal to invest in its application life- 
cycle management tools and strategy. 

The announcement that Borland 
wants to get out of the development 
tools business came back in 
February, shortly after the 
company stated flatly that its 
developer tools business was 
not for sale. 

Borland, which began as a 
development tools company in 
1983 with the revolutionary 
Turbo Pascal, made a failed 
attempt (as Inprise) at becom- 
ing an enterprise player, went 
back (as Borland again) to 
focusing on development tools and now is 
making another enterprise bid, has a diffi- 
cult road ahead. I'm still not convinced 
Borland knows what it wants to be, and 
that spells trouble in whatever market the 
company ultimately lands in. 

Borland has had an enterprise-ready 
application life-cycle tools suite for a 
while, when you take together Together 
for modeling, Caliber- RM for require- 
ments, Segue for testing and StarTeam for 
collaboration. However, as a person close 
to the situation pointed out recently, since 
Borland's R&D budget was constrained 
by declining revenues, the integrations 
across the life-cycle tools, which were 
acquired technologies, remain an issue. 

The company is going "all in" in an 
ALM space already dominated by IBM, 
strongly contested by Microsoft with its 
Team System, and which already has a 
half-dozen other solutions, from MKS, 
Seapine, Serena, Telelogic and others, 
including the evolving Eclipse move- 
ment. Core SDP, Borland's response, is 
seen by some to be late to the market. 



IBM, leveraging Eclipse, and 
Microsoft, via newfound revelation, are 
building out their tool sets with heavy 
contributions from partner companies. 
Borland, in fact, supports Eclipse and is 
a longtime Microsoft partner. But where 
is the third-party ecosystem for Borland 
to draw on to grow its solution? Its part- 
ner list pales in comparison. 

Borland's best bet is to 
ride the backs of its system 
integrator partners to get into 
the enterprise, although my 
source indicated that's more 
hype than reality for now. 

Borland has set up the 
development tools group 
with its own people in all the 
executive positions, and the 
V+W** company has indicated it 
^itf wants to retain control over 
direction because the integrations with 
the life-cycle tools remain important. (Is 
the company trying to hedge its bet and 
have its tools to fall back on again if the 
ALM move doesn't work out?) Anyway, 
it'll be interesting to see who the 
investor is that will come forward with 
cash when it won't be given control. 

All that for what is likely to be just a 
small niche in the ALM market. 

ANOTHER LOOK AT AGILE 

The recent Agile 2006 Conference in 
Minneapolis got us wondering: Is there 
empirical proof that software developed 
with the so-called agile processes is of 
better quality, or costs less or is devel- 
oped faster, than software written under 
more traditional methodologies? 

Carey Schwaber, an analyst with For- 
rester Research, said gaining hard met- 
rics about agile methodologies is tough. 
"Companies are not capturing baseline 
metrics," she told SD Times recently. 
"The benefits are so apparent [quality, 
cost, timelines, she said], but their prior- 



ity isn't collecting metrics. It's building 
quality software." 

Most of the discussion regarding agile 
success stories is anecdotal. You'll hear 
talk of a company that stopped a develop- 
ment project after x number of years and 
y number of man-hours, only to pick it up 
again using an agile process and finishing 
the job in months with two people. Of 
course, Schwaber noted, the naysayers 
will always say those projects are cherry- 
picked. "Are they using agile where they 
need it, or to make a case for agile?" 

Forrester's recent research on the 
topic, from November 2005, shows that 
14 percent of enterprises are using agile 
processes. Forty-eight percent respond- 
ed they are not aware of agile processes, 
and 51 percent said they were not inter- 
ested in agile processes. 

"It's mostly fear of change," Schwaber 
said. "It's the difficulty of change, and 
people thinking agile doesn't apply to 
them. The waterfall has been a very long- 
standing process." 

But again, anecdotally, there are signs 
of uptake in the agile movement. Todd 
Little, the program director of the Agile 
2006 Conference, said that nearly 1,200 
people attended — double the previous 
year — and that he was seeing more than 
one team coming from organizations, 
and larger groups coming from larger 
companies. Also, there are more corpo- 
rate vice presidents and CIOs signing up 
to join the lower-level development 
managers and developers who first came 
to either Agile DevCon or XP Agile Uni- 
verse, before they merged into the cur- 
rent conference. 

Little pointed out that the larger 
companies are interested in making not 
only their development but their busi- 
nesses more agile. "It's shifting from a 
technology-driven methodology to a 
business-value-drive solution," he said. 
"We don't have to sell it anymore; we 
just have to deliver." I 

David Rubinstein is editor-in-chief of 
SD Times. 



Host connectivity software maker AttachmateWRQ has completed the acquisition of 
security and compliance software company NetlQ for US$495 million. The company 
will now be known as Attachmate. With the acquisition, Attachmate will be able to 
help enterprises extend their host applications to Web services and assure their 
compliance, management and security. Attachmate is based in Seattle; NetlO's unit 
will remain in Houston. NetlQ no longer will be publicly traded ... The European 
Commission, the enforcement arm of the European Union, has fined Microsoft 
€280.5 million for what the commission called the company's unwillingness to com- 
ply with a March 2004 antitrust ruling. The fine was levied because the EC said 
Microsoft continued anti-competitive practices relating to its inclusion of the Win- 
dows Media Player with its operating system and its attempts to obfuscate the net- 
work printing and log-in functions of Windows. Brad Smith, Microsoft's general coun- 
sel, said in a statement that the issue is not a lack of compliance, but a lack of 
understanding about the 2004 ruling. "We will ask the European courts to determine 
whether our compliance efforts have been sufficient and whether the Commission's 
unprecedented fine is justified," Smith said . . . Mercury Interactive in July com- 
pleted the restatement of financials for fiscal years 2002 through 2004, resulting in 



a decrease of US$566.7 million in income before taxes from 1992 through December 
2004. A special committee had found stock-option practice irregularities dating back 
to 1993 that showed the actual grant dates of options differed from the originally 
stated grant dates for those options. "The company remains in a strong financial 
position and we believe has a significant market opportunity going forward," said 
Tony Zingale, Mercury president and CEO in a statement ... The board of directors 
of CA has authorized a stock repurchase program to buy US$2 billion of its common 
stock. As of March 31, there were 527 million outstanding shares. 

EARNINGS: Business integration software provider TIBCO Software reported 
revenue of US$121.2 million and net income of $24.5 million, or 11 cents per share, 
for the second quarter of fiscal 2006, ended June 4. This compares with revenue of 
$101.4 million and net income of $21.7 million, or 10 cents per share, for the same 
period a year earlier . . . EMC reported that revenue for independent subsidiary 
VMware grew 73 percent in the second quarter from the same period last year, to 
a total of US$157 million. VMware launched the Virtual Desktop Infrastructure 
Alliance during the quarter. I 
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www.gartner.com/2_events/conferences/ad8.jsp 
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Sept. 25-28 
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www.gartner.com 
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Mercury World Oct. 8-11 
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For a more complete calendar of U.S. software 
development events, see www.bzmedia.com/calendar. 
Information is subject to change. Send news about 
upcoming events to events@bzmedia.com. 
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Altova® UModel 2006 - The starting point for successful software development. 



/y\ ALTOVA @ 



2006 



Visualize works 
of software art 





Draw on UModel® 2006, and picture 
better programs based on UML™. 

Spied in UModel 2006 Release 2: 

• Activity diagrams 
•State machine diagrams 
• Component structure diagrams 
• Context-specific toolbars 



Altova UModel 2006, the burgeoning new force 
in the software design space, is the simple, 
cost-effective way to draw on UML. Use 
it to interpret or create your software 
architecture. Decode Java or C# 
programs into clear, accurate UML2 
diagrams, or outline applications 
and generate code from your plans. 
With all major diagram types, 
interoperability via XMI 2.1, and an 
artful user interface, UModel makes 
visual software design practical for 
programmers and project managers 
everywhere. Take the mystery out of Ul 
Download UModel® 2006 today: 
www.altova.com 
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Ship Software OnTime" 
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ONTIME2006 

The Fast & Scalable Team Solution for... 

Defect & Issue Tracking • Feature & Change Tracking • Task & To-do List Tracking • Helpdesk Ticket Tracking 

OnTime is the market-leading project, defect and feature management tool for agile software development and test teams. 
OnTime facilitates tracking, analyzing and trending team-based software development efforts in an intuitive and powerful user 
interface. A fully customizable Ul, powerful workflow, process enforcements, two-way email communications and custom reports 
combine to help software development teams ship software on-time! 

Available for Windows, Web & VS.NET 2003/2005 



OnTime 2006 Professional Edition 



OnTime 2006 Small Team Edition 




• For Teams of 1 to 1 ,000 Members 

• From $149 Per User 




• For Teams up to 1 Members 

• Free Single-User Installations 

• $495 for 5-Team Members 

• $995 for 10-Team Members 



8006530024 





asp.netPRO 
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www.axosoft.com 






Best Project Management/ 

Defect Tracking 

OnTime 2006 Software 

Project Management System 

Axosoft 
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Only $495 for up to 5 Users • Only $995 for up to 10 Users 

Free Single-User Installations 



